SBI Identifies 3897 Customer Records in Data Exposure

A suspected data exposure involving State Bank of India has raised concerns about customer privacy after a hacker group claimed to have released 375000 customer records online. According to a report published by Jagran Josh on October 21, 2026, the bank's preliminary assessment identified 3897 potentially compromised records containing personal information. The figures represent two different assessments of the incident.

The hacker group's claim concerns 375000 customer records and 2722 PDF files, while SBI reportedly identified 3897 records as compromised during its initial investigation. The reported exposure includes names, gender, registered mobile numbers, email addresses, dates of birth, residential addresses, bank branch details, Customer Information File identifiers and loan application lead IDs, according to media reports cited by Jagran Josh.

SBI has activated its cyber incident response plan and engaged an independent agency to investigate the incident, the report said. The investigation is intended to examine the suspected exposure, while the available information does not establish the full extent of the incident.

The distinction between the two record counts remains important because the larger figure comes from the hacker group's allegation, whereas the smaller number reflects the bank's reported preliminary findings. The figures should not be treated as equivalent measures of confirmed exposure. The information described in the reports primarily concerns personal identifiers and banking-related application metadata. The available reporting does not establish that account passwords, NetBanking PINs or Unified Payments Interface PINs were compromised.

Even without those authentication credentials, exposed personal information could help fraudsters make deceptive communications appear legitimate. Names, telephone numbers and loan-related details may allow scammers to impersonate bank representatives or send convincing messages about account verification, loan applications or customer identification requirements. The reported exposure does not by itself establish that customer bank accounts were accessed or that funds were stolen. The extent of any unauthorized access to accounts or misuse of the exposed information has not been established in the cited report.

Customers can reduce potential fraud risks by refusing to disclose one-time passwords, UPI PINs and NetBanking passwords to callers claiming to represent the bank. Unexpected requests involving know-your-customer updates, loan approvals or blocked accounts should be verified through official SBI channels. Regularly reviewing account statements and enabling transaction alerts, where available, can help customers identify suspicious activity.

Customers should also avoid unfamiliar links, refrain from installing applications at the request of unverified callers and never grant screen-sharing access to suspicious contacts. Anyone who suspects that banking credentials have been compromised should change affected passwords and contact the bank through its official customer service channels. Customers in India can also report suspected cybercrime through the national helpline at 1930 or the National Cyber Crime Reporting Portal, preserving relevant messages, screenshots and transaction records.

The investigation remains ongoing, and the available report does not establish whether the hacker group's full claim of 375000 records corresponds to data confirmed as compromised by SBI.