SBI Customer Data Allegedly Breached: 3.75 Lakh Records Exposed on Dark Web
A threat actor using the handle "Siriusim" has claimed to have compromised 3.75 lakh customer records and 2,722 documents allegedly belonging to the State Bank of India and its subsidiaries. The data, posted on BreachForums—a cybercrime marketplace—reportedly includes loan applications, KYC records, supporting financial documents and personal customer information.
The claim surfaced on October 16, 2026, when cybersecurity account CyberPulse56 highlighted the breach on social media. The threat actor released four sample records to demonstrate authenticity. An investigation by The Free Press Journal verified that phone numbers in the samples were valid and matched WhatsApp profiles and passport photographs from associated KYC documents, suggesting at least some data corresponds to real individuals.
The alleged data set comprises 375,000 rows in CSV format along with 2,722 PDF documents containing loan applications, account-opening forms, customer identification details and residential addresses. The samples examined included names, dates of birth, mobile numbers, email addresses, residential details, occupations, nominees and bank branch information. However, confirmation of the full data set's authenticity and how the breach occurred remains pending.
