SBI orders high-level probe after suspected dark web leak of 3.75 lakh records

State Bank of India (SBI), the country's largest public sector bank, has ordered a high-level inquiry after a suspected leak of confidential customer information.

The bank began the action after receiving an alert from the Indian Computer Emergency Response Team, or CERT-In. According to the information SBI gave the stock exchanges, the alert claimed that customer information was present on the dark web in a suspicious manner.

On October 16, 2026, the threat intelligence service provider, the cyber security setup and CERT-In received the first official alert about this potential cyber threat. A preliminary inquiry that followed found a large data file of about 3.75 lakh records on the dark web.

According to the figures from the preliminary inquiry, a total of 3.75 lakh (3,75,000) records were found on the dark web. When the entire cache was examined closely, 3,897 of the records contained personally identifiable information (PII) that identifies customers.

On learning of the data leak, SBI activated its cyber incident response and containment protocols. To investigate the matter in depth and verify the leaked data, the bank has appointed an independent, CERT-In-empanelled cyber security agency. The agency is examining the nature and scope of the leaked data and its root cause.

The bank has said customers and investors need not panic. According to the bank, the alleged data leak has had no major or adverse impact on its core business operations. The bank is reviewing the matter in detail and is putting in place the necessary preventive and security measures to stop such incidents in future.

Work is currently under way at speed to verify the data, establish how and why the leak happened, and assess the risk it may pose to the bank and its customers. SBI has said it is extremely vigilant about its cyber security and gives top priority to the safety of its customers.