MUMBAI, INDIA—The SBI Data Breach investigation has raised concerns about customer information security after State Bank of India (SBI) identified 3,897 records containing personal information on the dark web. The bank is reportedly assessing a potential insurance claim under its ₹1,425 crore cyber insurance policy with Oriental Insurance.
According to an October 23 report by The Economic Times, SBI has notified its insurer about the suspected exposure and is evaluating possible financial losses.
SBI has reassured customers that account balances remain safe and its core banking operations have not been materially affected.
What Happened in the SBI Data Breach?
SBI received alerts about suspected customer data exposure on October 16, 2026, from its threat intelligence service provider, the Defence Cyber Agency, and the Indian Computer Emergency Response Team (CERT-In).
Following the alerts, the bank examined approximately 375,000 records available on the dark web.
Its preliminary investigation identified 3,897 customer records containing personally identifiable information (PII).
In an official stock-exchange disclosure dated October 21, SBI acknowledged the data-loss incident and confirmed that further investigation was underway.
The bank has not established the exact source of the exposure.
Importantly, the 375,000 figure represents records examined, not the number of confirmed affected customers.
What SBI Customer Information Was Exposed?
According to SBI’s regulatory disclosure, the identified information reportedly included:
- Customer names and registered mobile numbers.
- Dates of birth and gender.
- Email and residential addresses.
- Bank branch and customer identification details.
- Loan application and related metadata.
SBI has not confirmed that internet banking passwords, UPI PINs, OTPs, or card security codes were exposed.
However, personal information could potentially be misused for identity theft, phishing attacks, and financial scams.
Fraudsters may use such information to impersonate bank representatives and send convincing messages requesting additional banking details.
SBI Evaluates ₹1,425 Crore Cyber Insurance Cover
The latest development in the SBI Data Breach investigation concerns the bank’s reported cyber insurance protection.
According to The Economic Times, SBI has informed Oriental Insurance about the suspected incident and is assessing potential losses before filing any claim.
The reported policy provides coverage of up to ₹1,425 crore, subject to its terms and conditions.
However, ₹1,425 crore is an insurance coverage limit, not a confirmed loss or settlement.
Cyber insurance policies may cover eligible expenses involving investigations, data recovery, legal liabilities, customer notifications, and business interruptions.
Any payment would depend on the investigation’s findings and the specific coverage provisions.
The development highlights how cyber insurance can help financial institutions manage certain risks associated with digital banking and customer data security.
Are SBI Customers’ Funds Safe?
SBI has assured customers that their account balances remain safe and banking services continue operating normally.
Nevertheless, customers should take precautions against potential fraud.
Recommended safety measures include:
- Review bank transactions regularly.
- Avoid suspicious KYC verification links.
- Never share OTPs, UPI PINs, or banking passwords.
- Use official SBI applications and websites.
- Report unauthorized transactions immediately.
Customers can contact SBI through its official customer service channels.
Financial cyber fraud can also be reported through India’s 1930 cybercrime helpline or the National Cyber Crime Reporting Portal.
What Happens Next in the SBI Investigation?
SBI has appointed an independent cybersecurity agency empanelled by CERT-In to investigate the suspected exposure.
The investigation aims to determine the authenticity, source, and extent of the compromised information while assessing potential risks.
The bank has also activated incident response procedures and is implementing appropriate preventive measures.
Further official disclosures may clarify the incident’s financial impact and whether SBI formally pursues an insurance claim.
Conclusion
The SBI Data Breach investigation highlights cybersecurity challenges facing India’s banking sector. Although SBI has identified 3,897 records containing personal information, the full extent and origin of the exposure remain under investigation.
The reported ₹1,425 crore cyber insurance cover could help address eligible financial losses. Meanwhile, SBI customers should monitor account activity, follow official security guidance, and remain alert to potential scams.
