State Bank of India is investigating a potential data breach involving thousands of customer records that appeared on a dark web forum, according to a recent report by Tech Radar.
The incident came to light after a threat actor claimed to possess 375,000 records, including 3,897 files containing sensitive customer information. Exposed data reportedly includes names, dates of birth, email addresses, residential addresses and loan-related identifiers. The bank, which is the largest public-sector financial institution in India, was alerted to the situation in mid-October 2026 by the Defence Cyber Agency and the Indian Computer Emergency Response Team. While the institution has launched a forensic investigation with an independent cybersecurity agency, it has not yet confirmed the authenticity of the leaked files or the source of the exposure. Industry experts warn that if the data is verified, the information could be leveraged for sophisticated phishing campaigns, potentially leading to malware infections or business email compromise attacks. The bank maintains that the incident does not currently impact its core business operations. Customers are advised to remain vigilant against suspicious communications that may attempt to exploit the leaked details to gain unauthorized access to financial accounts.
Source: Tech Radar
