---
title: "SBI Customer Data Leak Claim Appears Online, Still Unverified"
date: 2026-10-19
author: "Sofia Ramirez"
featured_image: "https://sqmagazine.co.uk/wp-content/uploads/2026/10/sbi-data-breach-claim-unverified.jpg"
categories:
  - name: "Cybersecurity"
    url: "/cybersecurity.md"
tags:
  - name: "News"
    url: "/tag/news.md"
---

# SBI Customer Data Leak Claim Appears Online, Still Unverified

India Today Tech said on October 19, 2026, that a hacker group called Siriusim claims that it has access to personal customer information tied to State Bank of India (SBI). The claim is unverified.

## What Happened?

- Siriusim, an anonymous hacker group, made their claims on BreachForums, a dark web forum, the outlet said.
- India Today Tech published its report on October 19. It cannot independently confirm the authenticity of the breach.
- SBI has not addressed these claims at the time of writing, the outlet said. Without a reply, the claim has no confirmation from the bank.
- The outlet says the authenticity and the extent of this breach remain unverified.

## The outlet could not verify the group’s claim

India Today Tech said **State Bank of India** may have suffered from a [data breach](https://sqmagazine.co.uk/data-breach-statistics/), citing online reports. Siriusim says the reported hack threatens to expose the confidential data of customers. The outlet stressed that all of this is unproven, and the bank has said nothing so far.

The origin is also open. The outlet cannot say whether this data came directly from SBI, one or more of its subsidiaries, or third-party service providers. It added that it is also unclear whether this data is new or recycled from prior leaks.

**A claim posted on a forum is not proof of a breach**. Until SBI or an independent party checks the material, nothing has been established beyond the fact that the group says it holds data.

> ‼️DATA LEAK CLAIM — STATE BANK OF INDIA 🇮🇳 A threat actor identified as Siriusim claims to have leaked customer documents and personal data allegedly associated with the State Bank of India (SBI). 🎯 Target: State Bank of India (SBI) 🌍 Country: India 🇮🇳 🏦 Sector: Banking / Financial Services 📅 Claim reported: October 16, 2026 Claimed dataset: ▪️ 375,000 CSV rows ▪️ 2,722 PDF documents ▪️ Personal customer information ▪️ Loan applications and supporting documents ▪️ Account-opening applications ▪️ Address and other application-related details ⚠️ The threat actor describes this as the first disclosure of the dataset. The authenticity, origin and extent of the alleged exposure remain UNVERIFIED. Potential impact: If legitimate, the data could facilitate identity theft, financial fraud, targeted phishing and fraudulent loan applications. SBI should investigate the claim, verify whether customer records were exposed and notify potentially affected customers through official channels. #CyberSecurity #India #SBI #StateBankOfIndia #DataLeak #DataBreach #BankingSecurity #ThreatIntelligence
> 
> — CyberPulse (@CyberPulse56) [October 16, 2026](https://x.com/CyberPulse56/status/2111026143130526105?ref_src=twsrc%5Etfw)

## Earlier bank incidents are background only

In July, Bank of Baroda acknowledged a data leak, the outlet recalled. It also noted that last year, a vulnerability was found in SBI’s Yono app that was later fixed via an update. Neither episode is evidence about Siriusim’s claim.

The outlet said only that there have been cases of bank data breaches in India before. If the claim were genuine, the data could be used for [identity theft](https://sqmagazine.co.uk/identity-theft-statistics/) and cyberfraud, India Today Tech said. It added that criminals could also combine leaked personal details with AI-generated messages, cloned voices or deepfake videos to target victims.

## What to Monitor?

Customers who get an unexpected call or message that quotes their bank details can pause before replying. Checking through the bank’s official app or a published helpline helps reduce risk, though no single check removes it.

**The next marker is SBI’s answer**. A confirmation, a denial or a technical finding would show whether the group’s listing matches real SBI records. Until then, everything here remains the group’s own claim.