State Bank of India reports cyberattack — thousands of customer records affected, here's what we know

SBI is India’s largest public-sector bank, and one of the country’s biggest financial institutions.

Leaking PII 375,000 records were apparently made available on the dark web, among which were 3,897 bank customer records containing Personally Identifiable Information (PII).

So far, the bank does not know if the leak is authentic, who leaked it, or how they obtained the data.

In the meantime, an X account called CyberPulse56 flagged a dark web forum post, made on October 16 2026 by a threat actor called Siriusim.

They allegedly contained personal customer information, loan applications and supporting documents, account-opening applications, and address and other application-related details.