SBI Confirms Individual Notifications to Customers After Data Breach
State Bank of India reassures clients about account safety following a data breach affecting thousands.
SBI informed affected customers via email and WhatsApp.
3,897 records with sensitive information were identified.
Customers are urged to practice safe digital banking.
In response to a significant data breach, the State Bank of India (SBI) announced on October 23, 2026, that it has individually notified all customers whose information was compromised. Notifications were sent through email and WhatsApp, ensuring that those affected were made aware of the situation promptly.
The bank reassured its customers, stating, "We reiterate that your account balances and funds are safe with us." SBI emphasized the importance of maintaining secure digital banking practices, advising customers to never share their OTP, PIN, or passwords, and to remain vigilant against suspicious communications.
Earlier this month, SBI faced criticism for its delayed communication regarding the breach, despite having informed stock exchanges about the incident. The bank had received alerts from its Threat Intelligence Service Provider, the Defence Cyber Agency, and CERT-In regarding the potential exposure of customer data on the dark web. On October 21, 2026, SBI disclosed to the exchanges that certain customer data had been compromised.
A preliminary analysis revealed that out of approximately 375,000 records found on the dark web, 3,897 contained Personally Identifiable Information (PII). This sensitive data included customers' mobile numbers, birth dates, names, gender, email addresses, residential addresses, and identifiers related to their bank accounts and loans. SBI stated that a thorough investigation is underway to verify the authenticity of the exposed data and assess the risks involved.
The implications of this breach are significant, as it raises concerns about customer privacy and data security within India's largest public sector bank. As SBI continues its investigation, it is crucial for customers to remain aware of potential risks and to adhere to recommended safety measures. The bank's next steps will involve further analysis to understand the breach's source and extent, ensuring that all necessary precautions are taken to protect its clients in the future.
