SBI Data Breach Allegation: Hacker Claims Sensitive Information of 3.75 Lakh Users Exposed

The State Bank of India (SBI) is facing allegations of a potential data breach after a hacker group claimed that sensitive information belonging to approximately 3.75 lakh users may have been exposed. The reported incident has raised concerns about the security of customer records, including Know Your Customer (KYC) documents and other financial information.

According to a report by India Today, the claims were associated with a hacker group identified as Siriusim, which allegedly shared information about the purported breach on the dark web forum BreachForums. The development gained wider attention after cybersecurity account CyberPulse56 highlighted the claims on social media.

The dataset allegedly contains around 3.75 lakh rows in CSV format, along with 2,722 PDF documents. The files reportedly include sensitive customer information, such as KYC records, loan applications, account-opening forms and residential addresses. If authenticated, the exposure of such information could create risks for affected individuals, including identity theft, financial fraud and targeted phishing attempts.

However, the allegations have not been independently verified, and the reported contents of the dataset do not establish that all the information belongs to SBI customers or that the bank’s systems were directly compromised. Further investigation would be necessary to determine the authenticity of the files, the origin of the data and the number of people potentially affected.

At the time of publication, SBI had not publicly responded to the allegations, according to the report. Details regarding the possible cause of the incident, the period during which the information may have been accessed and any remedial measures remained unclear. The claims have renewed concerns about cybersecurity and the protection of sensitive financial information as banks increasingly rely on digital systems to manage customer records and services.

Cybersecurity experts generally advise customers to remain alert to suspicious calls, messages and emails requesting banking credentials or personal details. Customers should avoid sharing passwords, one-time passwords (OTPs) or other confidential information with unverified individuals.