SBI acknowledges data breach as nearly 4,000 customer records found online

State Bank of India (SBI) has acknowledged a data security incident following the discovery of nearly 3,897 customer records on the dark web, marking a significant breach at the country's largest lender by assets.

The bank confirmed the "loss of certain data" in an official statement but provided limited details about the breach. The disclosure did not specify what information the remaining records contain, whether additional SBI customers are affected beyond those identified, or the total number of individuals potentially impacted by the incident.

The emergence of customer records on the dark web—an encrypted network often used for illicit activities—has intensified concerns about data security in India's banking sector. The incident comes as financial institutions face increasingly sophisticated cyberattacks and data theft operations targeting sensitive customer information.

SBI, which serves hundreds of millions of customers across India, has not detailed the timeline of the breach or the measures taken to prevent further data leakage. Banking regulators and cybersecurity experts have called for greater transparency from financial institutions regarding such incidents to help customers assess potential risks and take protective measures.

The development is likely to prompt regulatory scrutiny and may require the bank to notify affected customers and comply with data protection requirements under Indian law.