2026 SBI — KYC data breach; 375K customer records claimed on BreachForums
Data compromised
Customer names, addresses, phone numbers, KYC documents, loan applications, personal information; sample records partially verified by independent researchers.
Technical writeup
Threat actor Siriusim posted 375K KYC records and 2,722 PDFs on BreachForums Oct 16. Sample verification showed matching phone/photos but full dataset unconfirmed. SBI has not confirmed or denied breach as of Oct 19. Access method unknown. No ransom demand reported.
Root cause
Unknown; no disclosure from threat actor or SBI on attack vector or access method.
References
- https://www.freepressjournal.in/business/sbi-subsidiaries-customer-data-allegedly-on-dark-web-375-lakh-records-2722-documents-claimed-in-data-breach
- https://www.varindia.com/news/sbi-3-75-lakh-customer-data-leak-claim-sparks-alarm
- https://www.telanganatribune.com/sbi-data-leak-involves-375000-records-and-2722-pdfs