Data breach · on the rundown Monday, October 19, 2026
SBI says 3,897 customer records identified on dark web after CERT-In alert
Covered by 26 outlets over 52 hours. They ran 24 distinct reports. First reported by India Today at 08:30 UTC on October 19, 2026.
- outlets26
- distinct reports24
- first to latest report52 h
- names in it3
What happened?
- Reportedly, the records identified had included names, gender, birth dates, mobile numbers registered, email and residential addresses, branch/CIF identifiers, lead IDs, and metadata on loans/leads.
- SBI said it engaged an independent CERT-In-empanelled cybersecurity agency and that core business functions, financial performance and business continuity were not materially affected
Exposed fields reportedly included names, dates of birth, mobile numbers, email and residential addresses, branch and CIF identifiers, lead IDs and loan-application metadata.
A machine summary written from the reports listed below; read them for the full account. How summaries are made and what is checked.
Who reported it, and when?
A report's title is shown once our automated legal check has read it and passed it; 13 reports are named by outlet, and the links lead to each report.
Who was named?
- State Bank of India 14 events
- CERT-In
- Independent CERT-In-empanelled cybersecurity agency
More news naming State Bank of India
- Oct 19 · Finance Nasdaq gains 1.1% while Dow closes under its 50-day line 1
- Sep 11 · Finance NSE IPO: ₹22,561 cr OFS at ₹1,700–1,785 band opens Sept 17 2
- Aug 24 · Finance SBI report flags divergence in RBI policy communication 4
- Jul 11 · Finance SBI Funds Management flags AUM dependence, market volatility as IPO risks 2
- Jul 9 · Startups SBI Funds’ $12.24B IPO 2
Sources: the outlets' reports linked on this page; counts and times from GetYourBrief's record of those reports (methodology).