SBI Data Leak Alert 2026: Hackers Claim 3.75 Lakh Customer Records Stolen, KYC and Loan Documents at Risk

SBI Data Leak News October 2026: A cybersecurity claim involving the State Bank of India (SBI), the country's largest public-sector bank, has raised concerns about the safety of customers' personal and financial information.

An unidentified hacker group calling itself Siriusim has reportedly claimed possession of approximately 3.75 lakh records and 2,722 PDF documents allegedly associated with SBI customers.

The records are claimed to include personal information, residential addresses, loan applications and documents related to bank account opening.

According to a report published on October 20, 2026, cybersecurity monitoring account CyberPulse56 first highlighted the alleged incident on social media platform X on October 16.

However, the alleged SBI data breach has not been independently verified. It remains unclear whether the records are genuine, where they originated or whether SBI's internal banking systems were compromised.

The number of records mentioned in the claim also does not establish how many individual customers, if any, were affected.

Here is everything SBI customers should know about the reported cybersecurity incident, potential risks, banking security rules and precautions against financial fraud.

SBI Data Leak 2026: What Has Happened?

A hacker group identified as Siriusim has allegedly claimed access to a collection of records associated with SBI customers.

The claim attracted attention after CyberPulse56, an account that monitors cybersecurity developments, shared information about it on X.

According to the reported details, the alleged dataset contains around 375,000 records in CSV format.

The group also claims to possess 2,722 PDF documents.

CSV files are commonly used to store structured information, while PDF files can contain scanned documents, application forms and other records.

However, the existence of a claim about these files does not prove that the information was stolen from SBI.

There has been no independently verified evidence establishing the authenticity or source of the alleged dataset in the supplied report.

SBI Alleged Data Breach: Key Details

These figures describe the hacker group's reported claims. They should not be interpreted as confirmed numbers of stolen SBI customer records.

What Customer Information Is Allegedly Involved?

According to the report, the group claims to possess information relating to customers' identities and banking applications.

The allegedly affected categories include personal identification details, residential addresses, loan application records and account-opening documentation.

Such information can be sensitive because it may help criminals impersonate individuals or create convincing fraudulent communications.

For example, someone who knows a customer's name, address and loan-related information might attempt to send a message that appears to come from a legitimate bank representative.

However, there is no confirmation that these particular categories of data have actually been exposed from SBI systems.

The full contents and authenticity of the alleged files remain unverified.

Has SBI Confirmed the Data Breach?

The supplied report does not establish that SBI has confirmed a breach.

According to The Economic Times, SBI had not responded to its questions about the claim as of October 20, 2026.

That does not, by itself, prove that a breach occurred.

It also does not establish that the claim is false.

An independent technical investigation would be required to determine whether the files are genuine, whether they contain current customer information and how the data may have been obtained.

The source of the alleged records is particularly important.

Even if documents associated with a bank are found outside its systems, that does not automatically demonstrate that attackers directly accessed the bank's core infrastructure.

The information could potentially have originated from another system or source, although no such explanation has been established in this case.

Does the Claim Mean 3.75 Lakh SBI Customers Were Affected?

Not necessarily.

The reported figure refers to the number of alleged records, not a verified count of unique customers.

A single customer may have multiple records associated with different banking activities.

Some entries could also be duplicates, incomplete records or information from unrelated sources.

Until the alleged dataset is authenticated and examined, it is not possible to determine how many individual customers may be affected.

Customers should therefore avoid interpreting the 3.75 lakh figure as a confirmed number of victims.

What Could Happen if Banking Data Is Leaked?

If personal and financial records are exposed, cybercriminals may attempt to misuse the information in several ways.

One potential risk is identity theft, where someone uses another person's personal details to impersonate them.

Another concern is phishing, in which criminals send fraudulent emails, text messages or social media communications designed to steal passwords, OTPs or other confidential information.

Information from loan applications could also be misused to create convincing loan-related scams.

For example, fraudsters might contact a customer while pretending to discuss an existing loan, account verification or pending banking request.

However, these are potential risks associated with data exposure generally. They are not confirmed consequences of the alleged SBI incident.

Can Hackers Withdraw Money Using Personal Details Alone?

Possessing someone's name, address or account-related documents does not automatically provide access to their bank account.

Banks use authentication systems and other security controls to protect transactions.

However, exposed personal information can sometimes help criminals carry out social engineering attacks.

A fraudster may use accurate personal details to gain a customer's trust and then attempt to obtain an OTP, password, PIN or other sensitive credential.

This is why customers should remain cautious even when a caller appears to know information about their bank account.

No legitimate banking verification process requires customers to disclose confidential authentication credentials to an unknown caller.

Reports of Cyberattacks on Other Financial Institutions

The alleged SBI data leak claim has emerged amid wider concerns about cybersecurity in India's financial sector.

According to the supplied report, The Economic Times reported on October 15 that approximately 20 banks, non-banking financial companies and fintech businesses had reportedly experienced cyberattacks during the month.

Those incidents allegedly involved the misuse of stolen login credentials and weaknesses in payment-related application programming interfaces.

An API allows different software systems to communicate and exchange information.

If a payment-related API is inadequately protected, attackers may attempt to exploit it.

However, the reported attacks on other financial institutions have not been shown to be connected with the Siriusim claim involving SBI.

The incidents should not be treated as part of the same cyberattack without supporting evidence.

What Has CERT-In Said About Cybersecurity Threats?

The Indian Computer Emergency Response Team, commonly known as CERT-In, is the national agency responsible for responding to specified cybersecurity incidents.

According to the report, CERT-In issued a warning to financial institutions on October 9 concerning cyber threats.

Such alerts are intended to help organisations identify risks and strengthen security measures.

Financial institutions must take cybersecurity threats seriously because their systems handle sensitive customer information and financial transactions.

However, a general cybersecurity warning does not establish that a particular bank has suffered a confirmed breach.

What Do RBI Rules Say About Reporting Cyber Incidents?

The Reserve Bank of India has established cybersecurity and incident-reporting requirements for regulated financial institutions.

According to the supplied report, RBI directions issued in July 2026 require banks to report applicable cybersecurity incidents through the DAKSH platform within six hours of detection.

The report also refers to requirements for notifying CERT-In.

Separately, CERT-In's 2022 directions require specified cybersecurity incidents to be reported within six hours of being noticed or brought to the organisation's attention.

The precise reporting obligations depend on the applicable regulations and the nature of the incident.

Financial institutions may also be required to investigate security failures, preserve relevant information and take steps to reduce the risk of recurrence.

These reporting rules should not be interpreted as confirmation that SBI has reported or experienced the alleged incident.

SBI Customers: How to Protect Your Bank Account

Regardless of whether the reported data leak is genuine, customers can take practical steps to reduce the risk of banking fraud.

• Never share your OTP, PIN or password. These details should remain confidential, even if someone claims to represent SBI.

• Avoid suspicious links. Do not open unexpected links sent through SMS, WhatsApp or email asking for account verification.

• Check banking transactions regularly. Review account statements and transaction notifications for unfamiliar activity.

• Use official banking channels. Access SBI services through its verified website or authorised applications.

• Be cautious about KYC messages. Fraudsters may use urgent warnings about account suspension to pressure customers into sharing information.

• Report suspicious activity promptly. Contact the bank immediately if you notice unauthorised transactions or believe your credentials have been compromised.

Customers should also avoid downloading unfamiliar applications at the request of someone claiming to be a bank employee.

What Should You Do if You Receive a Suspicious SBI Message?

Fraudsters sometimes send messages claiming that a customer's account will be blocked unless KYC details are updated immediately.

Others may claim that a loan has been approved or that a refund is waiting to be credited.

Such messages can be particularly convincing when they contain personal details.

If you receive an unexpected communication, do not use the phone number or link included in the message to verify it.

Instead, contact SBI through its official customer service channels or visit an authorised branch.

If you suspect that your login credentials have been exposed, change them through the official banking platform and notify the bank.

How to Report SBI Banking Fraud in India

Customers who experience suspected unauthorised banking transactions should report the matter immediately.

In India, victims of cyber-enabled financial fraud can contact the national cybercrime helpline at 1930.

Complaints can also be submitted through the government's National Cyber Crime Reporting Portal.

Customers should additionally inform SBI using its official fraud-reporting or customer support channels.

Reporting promptly is important because it may help authorities and financial institutions take action while the transaction is still being processed.

Customers should preserve relevant transaction details, messages, phone numbers and other evidence.

The outcome of a fraud complaint and any applicable customer liability will depend on the circumstances and relevant banking rules.

Does SBI Use Security Measures to Protect Customer Data?

SBI states that its digital banking services use security mechanisms intended to protect customers against unauthorised access.

These include authentication controls, encrypted communications and other safeguards.

However, no digital system should be assumed to be completely immune to cybersecurity risks.

Banks and customers both have roles in protecting financial information.

While banks are responsible for maintaining appropriate security systems, customers should safeguard authentication details and remain alert to suspicious communications.

SBI Data Leak October 2026: Latest Update

A hacker group named Siriusim has claimed possession of approximately 3.75 lakh records and 2,722 PDF documents allegedly connected with SBI customers.

CyberPulse56 reportedly highlighted the claim on October 16, while media coverage on October 20 raised concerns about the potential exposure of personal information, residential addresses and loan-related documents.

However, the claim remains unverified, and there is no confirmed evidence in the supplied report establishing that SBI's internal systems were breached or that 3.75 lakh customers had their information stolen.

Customers should avoid panic but remain alert to suspicious calls, messages and unexpected banking activity.

The most important precautions are to protect passwords and OTPs, verify communications through official SBI channels and report any suspected financial fraud immediately.