Summary of this article
SBI reported a data leak affecting a very small number of customers.
The bank confirmed that all customer account balances are completely safe.
Operations remain unaffected while authorities investigate the dark web exposure.
The State Bank of India (SBI) has issued another statement following a cyber incident involving the suspected leak of customer data, assuring customers that their account balances are safe and that the incident has not materially affected the bank’s operations or financial performance. In a post on X, SBI said the incident had affected a “very very small number of customers”.
What SBI Said In Its Latest Advisory
In its statement titled Important Information for Customers, SBI sought to reassure customers about the impact of the incident on its operations and their funds. “With regard to the recent cyber incident related to data leak, we advise that the incident has impacted a very, very small number of customers,” the bank said.
SBI added that the incident had no material impact on its IT and core business operations, financial performance or business continuity. “Customer balances are completely safe,” the bank said, adding that it was taking all possible steps to protect customers' interests. The bank reiterated that the safety of customers’ financial assets, data and trust remained its highest priorities.
What Happened In The SBI Data Leak?
SBI disclosed the cyber incident in a notification issued on October 21, 2026, under the Securities and Exchange Board of India (SEBI) (Listing Obligations and Disclosure Requirements) Regulations, 2015. The bank reported a suspected leak of customer data linked to records found on the Dark Web.
SBI said it received alerts about the security concerns on October 16, 2026, from three sources: its intelligence service provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In). These alerts raised concerns about the possible exposure of customer information on the Dark Web.
An initial review of around 375,000 records found on the Dark Web identified 3,897 customer records containing personally identifiable information (PII).
While the incident has raised concerns about the security of customer data, SBI said that customers' account balances remained safe and that it was taking all possible steps to protect their financial assets and personal data.
