The State Bank of India (SBI) has individually notified customers whose personal data was identified in a recent suspected cyber incident, assuring them that their account balances and funds remain safe. In a statement issued yesterday, the country’s largest public sector lender said, the affected customers have been informed. The bank also advised customers to follow safe digital banking practices and remain alert to suspicious calls, messages and emails. SBI initiated a detailed investigation after receiving alerts on 16th of this month from its Threat Intelligence Service Provider, the Defence Cyber Agency and the Indian Computer Emergency Response Team (CERT-In) about suspected customer data exposure on the dark web.
A preliminary analysis of around three lakh 75 thousand records identified 3,897 customer records containing personally identifiable information. The information reportedly included names, mobile numbers, email addresses, dates of birth and residential addresses. The bank immediately activated its cyber incident response and containment measures. It also appointed an independent cybersecurity agency empanelled by CERT-In to assess the incident and establish the nature and extent of the suspected data exposure.
SBI clarified that the incident had no material impact on its business operations, financial performance or continuity. It said its core banking services continue to function normally without disruption. The bank has urged customers never to share their one-time passwords, PINs or banking passwords with anyone and to exercise caution while responding to unsolicited communications.
Must Read
- Advertisement -






