SBI Data Breach Claim: Hackers Allegedly Access 3.75 Lakh Customer Records, 2,722 PDFs

A potential data security incident involving the State Bank of India (SBI) has raised concerns after a hacker group allegedly claimed access to a large collection of customer information and banking documents. The claim was highlighted by a cybersecurity monitoring account on CyberPulse56 on X, which reported that the social media group had identified a hacker group named Siriusim, which possessed approximately 3.75 lakh records of its user base and 2,722 PDF files.

The allegation surfaced on October 16, 2026, which drew attention to the risks that are associated with the exposure of sensitive financial and personal information. However, the authenticity of the dataset, its source and the extent of any customer data exposure have not been independently verified.

According to CyberPulse56’s claims, the dataset includes around 3,75,000 entries as well as 2,722 PDF documents. The files contain personal customer information, residential addresses, loan applications, account-opening forms, supporting documents and other application-related records. If the information is genuine and contains current customer data, its exposure could create significant privacy and cybersecurity risks.

If the information is genuine, its exposure could create significant privacy and cybersecurity risks. Personal details contained in banking applications can potentially be exploited for identity theft, targeted campaigns, and other frauds.

Is the SBI Data Breach Confirmed?

This incident remains an allegation rather than a confirmed data breach. As per the social media handle and several media reports, a group identified as Siriusim is involved, but the available information does not independently establish whether the records originated from SBI or whether there has been any leak at all.

The difference is important because possession of documents linked to a bank does not prove unauthorised access to the bank’s systems. Verification would require establishing the authenticity of the records, their source and the circumstances under which they were obtained.

As for SBI customers, remain vigilant about unexpected calls, emails, and messages claiming to originate from SBI. Fraudsters may use personal details to make phishing attempts appear real and might persuade recipients to disclose certain information.

Customers should never share sensitive information like PINs or One-Time Passwords (OTPs) and should avoid clicking suspicious links or downloading attachments from unverified sources.

The incident underscores the importance of robust data protection, continuous cybersecurity monitoring and timely verification across banking systems in India.