AN anonymous hacker leaked a small batch of SBI customer records to BreachForums, disclosed in a post that includes a table of 375,000 rows and 2,722 PDFs.
SBI has confirmed that the leaked data included names, genders, mobile numbers, email addresses, home addresses, dates of birth, bank profile IDs, loan metadata and “other files.” Public filings to the National Stock Exchange suggest the incident impacted a very small fraction of SBI’s vast customer base—around 0.0008%—though the exact number of individuals affected remains unclear.
Journalistic verification reported that some of the leaked documents contained real personal information, including a mobile number linked to a KYC file and a matching passport photo, underscoring the potential harm to those affected.
Security experts warn that even a relatively small leak can have outsized consequences in India’s active PII market, where stolen details are traded and used for targeted identity fraud, phishing, and social engineering. The risk extends beyond direct account access: attackers can impersonate the bank in calls or messages and pressure victims to reveal one-time passwords or consent to fraudulent loans.
Industry commentators note that the leak may have originated from a peripheral data-handling system rather than SBI’s core banking infrastructure, echoing a prior 2019 incident tied to the SBI Quick service. SBI states its core operations remain normal, and the bank’s communications emphasise awareness and remediation, while researchers emphasise the difficulty victims face in recourse within India’s interconnected identity ecosystem.