SBI customer notifications have been sent individually to everyone whose data was identified as involved in a suspected cyber incident, State Bank of India said on October 23, 2026. The bank said it had contacted those customers by email and/or WhatsApp and reiterated that account balances and funds remained safe, while an investigation into the possible exposure continued.
Key Takeaways
- SBI says it has individually notified all customers whose data was identified as involved.
- A preliminary review of about 375,000 records identified 3,897 containing personally identifiable information.
- The bank’s assurance about funds does not settle questions about the authenticity, source or extent of the exposed data.
Table of Contents
- SBI customer notifications focus on identified records
- What the preliminary review established
- Investigation continues alongside customer precautions
- Conclusion
SBI customer notifications focus on identified records
The October 23 advisory marks a customer-contact step in the bank’s response, rather than the conclusion of its inquiry. SBI said it had individually informed all customers whose information had been identified as involved, using email, WhatsApp or both.
The bank reiterated that “your account balances and funds are safe with us.” It also urged customers to remain cautious when using digital banking services.
That assurance concerns the safety of money held at the bank. The separate investigation into potentially exposed personal information remains open.
| Item | Details |
|---|---|
| Initial alert date | October 16, 2026. |
| Alerting parties | SBI’s threat-intelligence service provider, the Defence Cyber Agency and CERT-In. |
| Customer advisory date | October 23, 2026. |
What the preliminary review established
SBI’s October 21 data-loss disclosure listing records the formal disclosure on its corporate-governance page. In its preliminary examination of around 375,000 records found on the dark web, the bank identified 3,897 records containing personally identifiable information.
The information was described as including names, registered mobile numbers, dates of birth, email addresses and residential addresses, as well as branch and customer-identification details and metadata associated with loan and lead records.
The larger pool reviewed should not be read as a confirmed count of affected SBI customers. The authenticity and full extent of the information, its possible source and the risks involved are still being investigated.
Investigation continues alongside customer precautions
SBI activated its cyber incident-response and containment protocols after receiving alerts. It also appointed an independent cybersecurity agency empanelled with the Indian Computer Emergency Response Team, or CERT-In, to investigate.
The bank said the incident had no material impact on its core business operations, financial performance or business continuity.
For customers, SBI’s immediate advice was to never share an OTP, PIN or password with anyone and to remain vigilant against suspicious calls, messages and emails. Those precautions remain relevant even with the bank’s assurance that balances are safe.
Conclusion
Customer contact has progressed, but the investigation remains unfinished. Its findings are the next thing to watch for clarity on the authenticity, extent and possible source of the exposed information.
Read More News
Disclaimer
This FinanceVelix article provides general information, not personalized financial, investment, legal, or tax advice. Market prices, interest rates and economic conditions can change; investments carry a risk of loss. Facts reflect the material available when published and may change. Check important information independently and consult a qualified professional when needed. Mentioning an asset, company, or service is not an endorsement.
