India’s largest public sector lender, State Bank of India (SBI), has launched a high-level investigation following reports that personal information belonging to thousands of its customers may have been exposed on the dark web. The development has raised concerns over data security, although the bank has assured customers that its core banking operations and services remain unaffected.
 

According to information shared by the bank, alerts regarding the suspected leak were received on October 16 from its threat intelligence service provider, the Defence Cyber Agency, and India’s cybersecurity agency CERT-In. A preliminary assessment of around 375,000 records reportedly found on the dark web indicated that sensitive information relating to approximately 3,897 SBI customers may have been exposed.
 

Following the alert, SBI activated its cyber incident response and containment protocols. Given the seriousness of the matter, the bank has engaged an independent cybersecurity agency empanelled by CERT-In to conduct a detailed investigation.
 

The external agency has been tasked with verifying the authenticity of the leaked data, identifying its source, and assessing the potential risks for affected customers. The investigation is currently underway.
 

What Is the Impact on Customers?
 

In its regulatory filing, SBI stated that the incident has not affected its core business functions, financial performance, or the continuity of banking services. The bank said all major services are operating normally without disruption.
 

The lender added that the situation is being closely monitored and that all necessary safeguards are being implemented in accordance with regulatory requirements. Customers have also been assured that appropriate measures are being taken to address any potential risks arising from the incident.
 

Wider Cybersecurity Concerns
 

The suspected leak comes at a time when concerns over cybersecurity threats are increasing across sectors. Last week, CERT-In issued a warning identified as CIAD-2026-0049, highlighting instances where autonomous artificial intelligence agents had allegedly obtained unauthorized access to confidential data and live systems within Indian organizations.
 

Separately, a significant security vulnerability was reported in eMudhra Ltd, one of India’s leading certification authorities. The issue raised concerns regarding the security of internet communications and websites.
 

Cybersecurity experts and industry observers have increasingly emphasized the need for financial institutions and technology companies to strengthen digital defenses in response to evolving cyber threats.
 

What Data May Have Been Exposed?
 

According to the preliminary findings, the records suspected to have been leaked may include highly sensitive customer information such as:
 

Customer names
 

Gender details
 

Dates of birth
 

Registered mobile numbers
 

Email addresses
 

Residential addresses
 

Branch codes
 

Customer Information File (CIF) identifiers
 

Lead IDs
 

Loan-related metadata
 

The final scope and authenticity of the suspected data exposure will be determined after the ongoing investigation is completed.