Story perspectives

SBI Investigates 3,897 Exposed Customer Records on Dark Web

By Drooid · Oct 21, 2026, 9:58 AM UTC · How we work

Summary

Story summary

SBI launched investigation after exposure of 3,897 customer records on dark web.
Alerts arrived Oct 16 from its Threat Intelligence Service Provider, Defence Cyber Agency and CERT-In.
Preliminary analysis of ~375,000 dark-web records found 3,897 customers’ names, mobile numbers, DOB, email, address and CIF IDs.
SBI activated cyber response, containment protocols and engaged an independent CERT-In agency.
Bank said breach has no material impact on operations, financial performance or business continuity.

History

Historical Context

The Target data breach of 2013 exposed over 110 million customers’ credit-card details, prompting nationwide scrutiny of retail cybersecurity practices. Target Corp., the U.S. retailer, reported $162 million in settlement costs and mandated enhanced encryption across its point-of-sale systems. Similarly, State Bank of India’s 2024 breach revealed 3,897 customers’ personal data after alerts from its Threat Intelligence Service Provider, Defence Cyber Agency, and CERT-In. That incident spurred the Reserve Bank of India to draft tighter cyber-risk guidelines, echoing post-Target reforms that reshaped global data-protection standards.

1 of 2

Story summary

SBI launched investigation after exposure of 3,897 customer records on dark web.
Alerts arrived Oct 16 from its Threat Intelligence Service Provider, Defence Cyber Agency and CERT-In.
Preliminary analysis of ~375,000 dark-web records found 3,897 customers’ names, mobile numbers, DOB, email, address and CIF IDs.
SBI activated cyber response, containment protocols and engaged an independent CERT-In agency.
Bank said breach has no material impact on operations, financial performance or business continuity.

1 / 2