SBI customer data exposure hits 3,897 records

State Bank of India said on Wednesday that 3,897 customer records containing personally identifiable information were found exposed on the dark web, according to an exchange filing.

SBI shares traded flat at 970 rupees on the BSE around 10 a.m., compared with a 52-week range of 891.55 rupees to 1,234.80 rupees, exchange data showed.

SBI's 3,897-record exposure The bank said it received alerts from its Threat Intelligence Service Provider, the Defence Cyber Agency and CERT-In earlier in the week. A preliminary review of about 375,000 records available on the dark web identified the 3,897 customer records, the filing said.

The exposed data included registered mobile numbers, dates of birth, names, gender, email addresses, residential addresses, branch and CIF identifiers, lead IDs and metadata tied to loan or lead records and related files, the bank said.

SBI said it activated cyber incident response and containment protocols and hired an independent CERT-In-empanelled cybersecurity agency to assess the alleged compromise. The bank said the incident had no material impact on core business operations, financial performance or business continuity.

Earlier in the week, a cybersecurity monitoring account said an unidentified hacker group using the name Siriusim claimed to hold information allegedly linked to SBI, including personal details, loan applications and account-opening documents. The post said the group purportedly had 375,000 CSV entries and 2,722 PDF documents.

For the rest of Oct. 21 trading, the equity test is whether SBI stays near 970 rupees as investors weigh the bank’s no-disruption statement against the continuing investigation.