Back to all incidents

State Bank of India

statebankofindia.com
CONFIRMED

State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said i...

Observable Status CONFIRMED
Industry / Sector Technology & Commercial
Incident Classification Network Intrusion & Data Exfiltration
Attributed Threat Actor Unattributed / Unknown
Affected Population Scope Under Audit
First Seen 2026-10-21
Last Updated 2026-10-23
Authentication Credentials Customer / Employee PII
OPEN WEIGHTS TELEMETRY • DETERMINISTIC CONFIDENCE

Confidence & Source Corroboration

69% CONFIDENCE
1. Primary Authority CONFIRMED BY TARGET Base weight: 50%
2. Evidence Specificity +7% Domain & Scope Telemetry
3. Corroboration Curve +12% 2 independent domains
4. Timeline & Staleness +0% 2 milestones logged
Corroborated Source Domains:
thehackernews.com darkreading.com

Technical Forensic Briefing

Incident Overview

State Bank of India, within its operating sector, has been subject to a cybersecurity incident. Ground-truth telemetry indicates the threat activity is currently unconfirmed or under forensic attribution.

State Bank of India has identified 3,897 customer records containing personal information in a set of about 375,000 records available on the dark web, and it does not yet know where the data came from. The state-owned bank, India's largest, said i...

Compromised Assets & Data Scope

The specific volume of affected customer or organizational records remains under active forensic investigation. Primary affected online infrastructure and perimeter domains include statebankofindia.com.

Specific classes of compromised records, credentials, or proprietary information continue to be audited through ongoing forensic investigation.

Authoritative Directives & Vendor Disclosures

  • Continuous Telemetry Monitoring: Formal statutory regulatory filings (SEC Form 8-K, State AG portals) and sovereign agency advisories (CISA, NCSC) are continuously monitored via automated ingestion pipeline.

Milestone Timeline (2 events logged)

2026-10-21 07:44 UTC
CONFIRMED BY TARGET

State Bank of India Confirms Data Leak After 3,897 Customer Records Found on Dark Web

2026-10-23 03:30 UTC
Media Pickup INDEPENDENT VERIFICATION

Press Coverage: State Bank of India Suffers a Customer PII Data Leak

Have updated information or a new verifiable source?

This incident record is a flat Markdown file tracked in Git. Propose an update or add a milestone via Pull Request.

Propose Update via GitHub