The State Bank of India (SBI), the country’s largest public sector bank, is facing scrutiny following claims by a hacker group that it has accessed confidential customer information. The group, identified as Siriusim, allegedly possesses records linked to approximately 3.75 lakh customers, including account-opening documents, loan applications and sensitive personal details.
The claims were reported by India Today Tech on October 19, 2026. However, the alleged breach has not been independently verified, and SBI had not responded to the publication at the time of reporting.
What Data Has Allegedly Been Exposed?
According to the report, Siriusim claims to possess more than 375,000 rows of data in CSV format and 2,722 PDF files. The alleged dataset could contain Know Your Customer (KYC) records, Aadhaar numbers, residential addresses, account-opening forms and supporting documents submitted with loan applications.
The hacker group reportedly published sample documents to support its claims. However, the authenticity of these records, their origin and the extent of any potential exposure remain unconfirmed.
It is also unclear whether the information, if genuine, was obtained directly from SBI, one of its subsidiaries or a third-party service provider handling banking-related applications. Investigators would need to establish whether the records are genuine, current and associated with SBI customers.
How Could the Alleged Leak Affect Customers?
If the claims prove genuine, the exposure of personal and financial documents could create risks beyond conventional financial fraud.
Cybercriminals could use names, addresses and loan-related information to make fraudulent calls or send convincing messages impersonating bank officials. Detailed personal information can make phishing attacks appear legitimate, increasing the likelihood that victims will disclose confidential information.
Leaked documents could also potentially be misused for identity theft, fraudulent applications or targeted scams. Criminals may combine personal information with AI-generated messages, cloned voices or deepfake videos to make their approaches more convincing.
However, there is currently no verified evidence establishing that these forms of fraud have occurred as a result of this particular alleged incident.
SBI Has Yet to Confirm the Breach
India Today Tech reported that it had contacted SBI for a response but could not independently confirm the authenticity of the alleged leak. The bank’s silence at the time of publication should not be interpreted as confirmation that its systems have been compromised.
The incident highlights the importance of investigating alleged data leaks promptly, verifying the source of exposed records and notifying affected customers if a genuine breach is established.
What Should SBI Customers Do?
Customers can take sensible precautions while awaiting verified information. They should never share OTPs, UPI PINs, ATM PINs or net-banking passwords with callers claiming to represent the bank. Suspicious links and unexpected requests for KYC documents should also be treated cautiously.
Customers should monitor account transactions and contact SBI through its official channels if they notice suspicious activity. If someone quotes personal information to establish credibility, that alone does not prove the caller is genuine.
Summary
A hacker group called Siriusim claims to have obtained data associated with 3.75 lakh SBI customers, including potentially sensitive KYC records, addresses and loan applications. The group reportedly claims possession of more than 375,000 data rows and 2,722 PDF files. SBI had not responded at the time of reporting, and the alleged breach remains unverified. Customers should remain alert to phishing and identity-theft attempts.
