LeakData breachupdated 25 Oct 2026, 15:24 UTC
State Bank of India customer personal data leaked
Personal details of State Bank of India customers were exposed. Criminals can use such data for scams, such as fake calls or messages that pretend to be your bank.
1 source, unconfirmed
| Severity | UnratedData breach |
|---|---|
| Being exploited? | UnclearNo reports either way yet |
| What to do | Check exposureBe wary of anyone contacting you about your bank account and verify them through official SBI channels before responding. |
| How sure is this? | 1 source, unconfirmedOnly one publisher so far, details may change |
How the attack works simplified
- 1Data stolenCustomer PII taken from the bank
- 2Data soldTraded in underground PII markets
- 3Scam targets youCriminals use details to impersonate the bank
- ResultCustomers face fraud and impersonation risk
What happened
State Bank of India suffered a leak of customer personally identifiable information (PII), reported by Dark Reading.
Why it is dangerous: Leaked identity details can be bought and sold in underground markets and used for phishing, fraud, or impersonation of bank customers.
Are you affected?
You are affected if you are a State Bank of India customer whose personal information was included in the leak.
What to do
- Watch for unexpected calls, texts, or emails asking for account details, OTPs, or passwords, and never share them.
- Contact State Bank of India directly through its official channels to confirm any suspicious message.
- Monitor your bank and card statements for transactions you do not recognize.
Timeline
- 23 Oct 2026, 03:30 UTCPublicly disclosed
- 23 Oct 2026, 03:30 UTCReported by Dark Reading · Dark Reading
- 25 Oct 2026, 15:24 UTCPicked up by Zero Radar
Sources 1 report, oldest first
Security press established security newsrooms
- State Bank of India Suffers a Customer PII Data LeakDark Reading · 23 Oct 2026, 03:30 UTC
Technical details
- ID
- ZR-fdce8a7d
- Disclosed
- 23 Oct 2026, 03:30 UTC
- On Zero Radar
- 25 Oct 2026, 15:24 UTC (3 days after disclosure)
- Last change
- 25 Oct 2026, 15:24 UTC
The plain-language parts and the attack diagram were written by an AI model (anthropic/claude-haiku-5.5) from the sources above. Facts like versions, exploitation and dates come from the sources themselves. How Zero Radar works