Privacy Unpacked

Confirmed breach

SBI data breach

INIndia

The Hindu, Moneycontrol and Infobae reported a data breach at SBI (India) on 20 October 2026, and it has been confirmed. It affected 3,900 customer records. Exposed: Email addresses, Phone numbers, Dates of birth, Names, Addresses and Gender and more.

Status
Confirmed breach
People affected
3,900 customer records
Reported
20 October 2026
Who is affected
India

What was exposed

  • Email addresses
  • Phone numbers
  • Dates of birth
  • Names
  • Addresses
  • Gender
  • Residential addresses
  • Genders
  • Internal codes linked to loans
  • PII
  • Branch details
  • Customer Information File (CIF) identifiers
  • Loan-related information
  • Customer names
  • Loan application metadata
  • Lead records
  • Customer records
  • Personal details
  • Customer loan documents

How it happened

How
Hacking a hacker group operating under the name Siriusim had acquired unauthorized access to SBI customer records source
Attacker
Siriusim a hacker group operating under the name Siriusim source

Sources

If SBI had your data

  1. Look for SBI’s own notice or letter: it should say what of yours was involved. Keep it.
  2. Expect scams that use your details: calls, texts or emails pretending to be SBI, your bank or the police. Never give codes or passwords, never approve a sign-in you did not start, never move money.

One email to confirm first. We use your address only for this alert, and one click deletes it.

More breaches in India

  1. CoinDCXINIndia · 27 October 2026 16MUSDT
  2. Central Board of Film Certification (CBFC)reportedINIndia · 25 October 2026 Confidential documentsUnreleased scriptsCertification records+5 500film titles
  3. Angel OneINIndia · 7 October 2026 Government ID numbersFinancial account and card detailsEmail addresses+4 6.8Maccounts

Every breach in India →

From the data breach tracker: official notices, breach databases and the news, every fact with its source. Open data (CC BY 4.0) · How the tracker works · Found a mistake? Tell us and we correct it.