Check Your State Bank of India Records Amidst Unverified Data Leak Claims
A threat actor alleges leaking 375,000 customer records and loan files from State Bank of India, though the bank has not confirmed the breach or its source.
Key points
- Threat actor Siriusim claims to have posted 375,000 CSV rows and 2,722 PDFs containing SBI customer data.
- The alleged dataset includes personal details, loan applications, KYC records, and residential addresses.
- State Bank of India has not commented on the claim, and the authenticity of the data remains unverified.
State Bank of India customers are advised to monitor their accounts after a threat actor named Siriusim claimed to have leaked a large dataset of banking records. The allegation, reported on 16 October 2026 by CyberPulse, involves personal information and application documents. However, the bank has not confirmed that a breach occurred or that its systems were compromised.
What data is alleged to have been exposed?
According to CyberPulse, the threat actor posted 375,000 CSV rows and 2,722 PDF files online. These files reportedly contain personal customer information, loan applications, supporting documents, account-opening forms, and residential addresses. India Today added that the material may include Know Your Customer records and Aadhaar numbers. The actor described this as the first disclosure of the dataset, though no independent verification has taken place.
View the original post on X
How many customers are actually affected?
The claim of 3.75 lakh affected users is based on the number of CSV rows, not a count of unique individuals. A single customer could have multiple applications or duplicate entries in the dataset. The PDF file count does not prove the number of separate victims. Cyber Security News noted that these figures do not establish the true scale of exposure. Without validation, it is impossible to know how many distinct people are represented in the alleged leak.
Is the source of the data confirmed?
The origin of the records remains unclear. Reports do not establish how the data was obtained or whether it came from State Bank of India’s core systems, a subsidiary, or a third-party service provider. There is no verified evidence of an exploited vulnerability, stolen login credentials, or a compromised server. India Today reported on 19 October that SBI had not addressed the claims when the article was published. It remained unclear if the material was newly exposed or recycled from earlier leaks.
What are the risks to customers?
If the data is genuine, it could facilitate identity theft, loan fraud, and targeted phishing attacks. Criminals might use application details to create convincing fake bank calls or messages. However, the reports do not indicate that account balances, passwords, or payment credentials were exposed. There is no evidence that attackers accessed customer accounts or initiated unauthorized transactions. The primary risk lies in the potential for social engineering using the personal and financial application details.
What affected people can do
Individuals should review their recent account statements for any unrecognised transactions or changes to contact details. Monitor credit reports for new applications you did not make. Be wary of unsolicited calls or messages claiming to be from the bank, especially those referencing specific personal details. Do not share passwords or one-time codes with anyone contacting you unexpectedly. If you suspect fraud, contact your bank through official channels listed on your card or statement, not via links in suspicious messages.
Background: Data leaks
Data leaks occur when sensitive information escapes its intended boundary. This happens through accidental sharing, poor system configuration, or malicious theft. You can prevent leaks by enforcing strict access controls, monitoring data flows, and ensuring employees understand how to handle sensitive files securely.
Read the full guide: What is Data Leaks: How Information Escapes and How to Stop It
What to do and how to stay safe: State Bank of India
- Check your bank statements regularly for any transactions you did not authorise.
- Monitor your credit reports for new accounts or inquiries you did not initiate.
- Be cautious of phishing attempts that use personal data to appear legitimate.
- Enable multi-factor authentication on your online banking accounts if available.
Step-by-step guide: Stop Credential Leaks: A Practical Prevention Checklist
General security guidance from the DarkWeb Dispatch newsroom. It is not confirmed advice from the organisations named in this story.
Frequently asked questions
Has State Bank of India confirmed the data breach?
No, SBI has not addressed the claims, and the authenticity of the data remains unverified.
What kind of data is in the alleged leak?
The claim includes personal information, loan applications, KYC records, and residential addresses.
How many people are affected?
The claim cites 375,000 CSV rows, but this does not confirm the number of unique customers.
