SBI data breach reported, hacker claims sensitive info of 3.75 lakh users at risk

The State Bank of India (SBI) may have suffered from a data breach, according to online reports. An anonymous hacker group called “Siriusim” claims the reported hack threatens to expose the confidential data of as many as 3.75 lakh SBI customers.The breach was first reported by Cybersecurity account CyberPulse56 on X. The hacker group made their claims on BreachForums, a dark web forum. The group alleges that it has over 3,75,000 rows in comma-separated values (CVS) format and 2,722 PDF files.At the time of writing, SBI has not addressed these claims. India Today Tech has reached out to the bank for a comment. The story will be updated as and when it responds. India Today Tech cannot independently confirm the authenticity of the breach.DATA LEAK CLAIM — STATE BANK OF INDIA A threat actor identified as Siriusim claims to have leaked customer documents and personal data allegedly associated with the State Bank of India (SBI). Target: State Bank of India (SBI) Country: India Sector: Banking / Financial Services Claim reported: October 16, 2026 Claimed dataset: 375,000 CSV rows 2,722 PDF documents Personal customer information Loan applications and supporting documents Account-opening applications Address and other application-related details The threat actor describes this as the first disclosure of the dataset. The authenticity, origin and extent of the alleged exposure remain UNVERIFIED. Potential impact: If legitimate, the data could facilitate identity theft, financial fraud, targeted phishing and fraudulent loan applications. SBI should investigate the claim, verify whether customer records were exposed and notify potentially affected customers through official channels. #CyberSecurity #India #SBI #StateBankOfIndia #DataLeak #DataBreach #BankingSecurity #ThreatIntelligence— CyberPulse (@CyberPulse56) October 16, 2026SBI data at risk?Siriusim has published documents that it claims to be four sample customer records. Alongside this, the hacker group claims that it has access to personal customer information, loan applications, and supporting documents. A screenshot of the post on BreachForums. If true, the dataset may contain Know Your Customer (KYC) records, Aadhar numbers, account-opening forms and residential addresses. However, the authenticity and the extent of this breach remain unverified. It is also unclear whether this data is new or recycled from prior leaks.Till the leak is verified, we cannot say whether this data came directly from SBI, one or more of its subsidiaries, or third-party service providers handling banking applications. If genuine, the data could be used for identity theft and cyberfraud. Criminals could also combine leaked personal details with AI-generated messages, cloned voices or deepfake videos to target victims.Previously, there have been cases of bank data breaches in India. In July, Bank of Baroda acknowledged a data leak that exposed 1TB of customer data. Last year, a vulnerability was found in SBI’s Yono app that was later fixed via an update.- Ends