The State Bank of India (SBI) is reportedly facing a potential data breach, as claimed by an anonymous hacker group named ‘Siriusim’. The group alleges that the breach could expose sensitive information belonging to approximately 3.75 lakh SBI customers. This claim was initially brought to light by the cybersecurity account CyberPulse56 on the social media platform X.

Siriusim has made its assertions on BreachForums, a dark web platform known for discussions surrounding cybersecurity incidents. The group claims to possess over 3,75,000 rows of data in comma-separated values (CSV) format, along with 2,722 PDF files. As of now, SBI has not publicly addressed these allegations, and inquiries from India Today Tech for comments remain unanswered.

The authenticity of the claims made by Siriusim is yet to be independently verified. CyberPulse56 has indicated that the bank should conduct an investigation to ascertain whether customer records have indeed been compromised and to notify affected individuals through official channels.

Details of Alleged Data Exposure

The hacker group has purportedly leaked documents that include sample customer records. They claim to have access to various types of personal information, including loan applications and supporting documents. If these claims are accurate, the dataset may encompass Know Your Customer (KYC) records, Aadhar numbers, account-opening forms, and residential addresses.

However, the extent and authenticity of this alleged breach remain unverified. It is currently unclear whether the data is newly obtained or if it has been recycled from previous leaks. Until the situation is confirmed, it cannot be determined if the data originated directly from SBI, its subsidiaries, or third-party service providers involved in banking applications.

If the claims are substantiated, the leaked data could pose significant risks, including identity theft, financial fraud, and targeted phishing attempts. Criminals might exploit the leaked personal information in combination with advanced technologies, such as AI-generated messages or deepfake videos, to deceive victims.

Cybersecurity Incidents in India

This incident is not isolated, as there have been previous cases of data breaches involving banks in India. For instance, in July 2026, Bank of Baroda acknowledged a significant data leak that exposed 1TB of customer data. Furthermore, last year, a vulnerability was identified in SBI’s Yono app, which was subsequently addressed through an update.

The potential implications of such breaches are substantial, affecting not only the banks involved but also the customers whose personal information may be at risk. Financial institutions are urged to enhance their cybersecurity measures to protect sensitive data and maintain customer trust.

As the situation develops, it is crucial for SBI to take immediate action to investigate the claims made by Siriusim. The bank’s response will be vital in determining the authenticity of the breach and in implementing measures to safeguard customer information.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store – https://apps.apple.com/in/app/newspin/id6746449540

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share