Cyberattack Exposes Thousands of SBI Customer Records on Dark Web
India’s largest lender, State Bank of India (SBI), is investigating a suspected cyberattack after nearly 4,000 customer records containing sensitive personal data were discovered on the dark web. The breach, disclosed in an exchange filing on October 21, was identified during a preliminary analysis that examined around 375,000 records available in underground forums.
The leaked data includes names, mobile numbers, dates of birth, email and residential addresses, branch details, customer identification numbers, and loan-related information. While SBI stated the incident has no material impact on core operations or financial performance, the exposure underscores growing cybersecurity risks in India’s banking sector as institutions expand digital services.
This follows a July breach at state-run Bank of Baroda, highlighting persistent vulnerabilities as lenders handle increasing volumes of sensitive customer data. The Reserve Bank of India (RBI) has repeatedly warned financial institutions about rising cyber threats, with a recent survey of 43 banks and shadow lenders revealing that one-third reported a moderate or significant increase in cyber risks over the past year.
Separately, Morgan Stanley is investigating an internal document leak in Asia, where an employee inadvertently shared details of investment-banking deals. While the firm confirmed an ongoing probe, it has not disclosed the full extent of the exposure or potential risks to customers.
The incidents reflect broader challenges in financial cybersecurity, as digitization and AI adoption expand the attack surface for institutions across the region.
Morgan Stanley TPRM report: https://www.rankiteo.com/company/jpmorganchase
"id": "jpm1792587404",
"linkid": "jpmorganchase",
"type": "Breach",
"date": "10/2026",
"severity": "60",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"{'affected_entities': [{'customers_affected': '4,000',
'industry': 'Banking/Financial Services',
'location': 'India',
'name': 'State Bank of India (SBI)',
'size': 'Large',
'type': 'Bank'}],
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '4,000',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Names',
'Mobile numbers',
'Dates of birth',
'Email addresses',
'Residential addresses',
'Branch details',
'Customer identification numbers',
'Loan-related information']},
'date_publicly_disclosed': '2023-10-21',
'description': 'India’s largest lender, State Bank of India (SBI), is '
'investigating a suspected cyberattack after nearly 4,000 '
'customer records containing sensitive personal data were '
'discovered on the dark web. The breach was identified during '
'a preliminary analysis that examined around 375,000 records '
'available in underground forums. The leaked data includes '
'names, mobile numbers, dates of birth, email and residential '
'addresses, branch details, customer identification numbers, '
'and loan-related information.',
'impact': {'brand_reputation_impact': 'Underscores growing cybersecurity '
'risks in India’s banking sector',
'data_compromised': '4,000 customer records',
'identity_theft_risk': 'High',
'operational_impact': 'No material impact on core operations or '
'financial performance'},
'initial_access_broker': {'data_sold_on_dark_web': 'Yes'},
'investigation_status': 'Ongoing',
'references': [{'date_accessed': '2023-10-21', 'source': 'Exchange filing'}],
'regulatory_compliance': {'regulatory_notifications': 'Disclosed in an '
'exchange filing'},
'title': 'Cyberattack Exposes Thousands of SBI Customer Records on Dark Web',
'type': 'Data Breach'}