A reported SBI data breach has raised concerns after hackers allegedly stole personal information linked to around 3.75 lakh customers. State Bank of India reportedly filed a police complaint following a cyberattack on its Global IT Centre in Navi Mumbai. The incident is said to have taken place between October 10 and 15, 2026.
According to the reported details, a hacking group identified as Siriusim allegedly accessed sensitive information stored in the bank’s systems. The attackers reportedly extracted 32 CSV files, JSON data and more than 2,700 PDF documents. These files are believed to contain customer-related information, although the exact categories of exposed data have not been independently confirmed.
SBI reportedly received alerts about the suspected breach on October 16. The bank later disclosed the incident to stock exchanges on October 21. A formal complaint was reportedly filed on November 12 at the CBD-Belapur police station in Navi Mumbai.
The complaint has reportedly led to a police investigation into the suspected theft of customer information. Investigators are expected to examine how the attackers gained access, what information was taken and whether the stolen records have been shared or misused.
The reported incident has attracted attention because SBI is India’s largest public sector bank. It serves millions of customers through its branches, digital banking services and other financial products. Any possible exposure of customer information can raise concerns about privacy and online fraud.
According to the supplied report, SBI has stated that its core banking operations remain unaffected. There have also been no confirmed reports of misuse of the allegedly stolen information. However, the absence of reported misuse does not necessarily mean that exposed information carries no future risk.
Cybercriminals can sometimes use stolen personal details to create convincing fraud messages. Such information may help scammers impersonate bank officials or contact customers through calls, emails and text messages. Customers should therefore remain cautious about unexpected requests involving their banking accounts.
SBI customers are advised to monitor account transactions and report any unfamiliar activity through official banking channels. They should also avoid sharing one-time passwords, PINs, passwords or other confidential information with anyone claiming to represent the bank.
Customers should not click on suspicious links received through SMS, email or messaging applications. Fraudsters may use urgent warnings about account suspension or security verification to trick people into revealing sensitive details.
The reported cyberattack also highlights the importance of protecting customer information in the banking sector. Financial institutions handle large amounts of personal and financial data, making strong security systems and regular monitoring essential.
Police investigations may provide further information about the alleged attackers, the method used to access the systems and the extent of the data exposure. Any confirmed findings will be important for understanding the impact on affected customers.
For now, the reported SBI data breach remains a matter of concern. Customers should continue using official banking services while staying alert to possible fraud attempts. Further clarification from SBI and investigating authorities will be needed to establish the full extent of the incident.
