Reports say State Bank of India is investigating 3,897 customer records identified within a larger dataset circulating on the dark web. The authenticity and scope remain under investigation.
State Bank of India (SBI) is investigating reports that 3,897 customer records were identified within a much larger dataset circulating on the dark web. Reports published on October 21–22, 2026 describe an ongoing inquiry; the available information does not establish that the entire dataset is authentic or that all records originated from SBI.
What is known so far
Media reports say the records were identified as part of a larger dataset and that SBI is examining the matter. The bank has been reported as saying its core banking operations remain unaffected. That statement concerns operational continuity and should not be interpreted as independently proving that no customer information was exposed.
At this stage, the exact origin, authenticity, data fields involved and total number of affected customers have not been conclusively established in the information cited below. The reported figure of 3,897 should therefore be treated as a figure under investigation, not a confirmed count of all impacted customers.
What customers should do
- Never share OTPs, PINs, passwords or CVV details with callers, text messages or links claiming to be from the bank.
- Use SBI’s official website, app or verified customer-service channels to check account activity and contact the bank if anything looks suspicious.
- Do not click unexpected links or install apps at the request of someone claiming to investigate a security incident.
- Change credentials if there is a specific reason to believe they may have been compromised, and use unique passwords where applicable.
- Report suspicious transactions promptly through the bank’s official channels and the appropriate cybercrime reporting service.
Why careful wording matters
A dataset appearing online does not automatically prove its claimed source, accuracy or completeness. Investigators need to establish whether the records are genuine, when and how they were obtained, what information they contain and whether any systems were accessed without authorisation. Customers should take sensible precautions without assuming that every account has been compromised.
Sources
- The Tribune — report dated October 22, 2026 on the reported records and investigation.
- Hindustan Times — report dated October 21, 2026 on the reported SBI data exposure.
- State Bank of India official website — use official channels for bank updates and customer support.
This report reflects information available in the cited reports at publication time. The investigation may change what is known; do not treat the reported exposure as a final forensic finding.
