Complaint says 3.75 lakh records stolen from SBI's Navi Mumbai server, data allegedly spread on dark web

A complaint has been filed in Navi Mumbai alleging a breach of the digital security of the country's largest public sector bank. It says the server at State Bank of India's Global IT Centre in CBD Belapur was entered without permission and 3.75 lakh records were stolen. The complaint also alleges that the stolen data was spread on the dark web.

According to the complaint, the cyber intrusion took place over six days, between October 9 and October 15, 2026. It is claimed that 32 CSV files, two JSON files and 2,721 PDF files were stolen from two key SBI applications, YONO 2.0 and RAAS.

The alleged intrusion into the bank's IT systems has raised serious questions about the security of customers' digital information. However, it is not yet clear exactly what customer information the stolen records contain, or whether it has been misused.

An SBI official lodged the complaint at CBD Belapur police station, after which a case has been registered against unidentified hackers. Police are investigating which network was behind the attack and where and how the data was used.

A case was registered and an investigation begun as soon as the complaint was received. The allegation that the data was spread on the dark web has increased concern among customers.