SBI Customers Alerted After Personal Data Is Reportedly Found on Dark Web

Reports published on October 21, 2026, said that personal information linked to State Bank of India (SBI) customers had been found on the dark web. According to the bank’s preliminary analysis, around 375,000 records were examined, of which 3,897 contained personally identifiable customer information. The data reportedly included names, registered mobile numbers, dates of birth, email and residential addresses, branch details, customer identifiers and information associated with loan records. SBI said the incident had no material impact on its core business operations, financial performance or business continuity. The bank has engaged an independent cybersecurity agency to investigate the authenticity, source and extent of the suspected data exposure.

Customers are advised to remain vigilant against phishing attempts and financial fraud. Never share OTPs, ATM PINs, CVVs, UPI PINs or internet banking passwords with anyone, even if the caller claims to represent the bank. Avoid suspicious links sent through SMS, email or WhatsApp, and do not install unknown applications or APK files at another person’s request. Regularly review account statements, card transactions and UPI activity, and contact SBI immediately if you notice any suspicious transaction. If you experience financial cyber fraud, call India’s cybercrime helpline at 1930 and report the incident through the National Cyber Crime Reporting Portal. Customers should rely on official SBI channels for verified updates.