State Bank of India (SBI) has identified 3,897 customer records containing personally identifiable information (PII) in data suspected of being exposed on the dark web, as the lender investigates the incident's nature and extent, The Times of India reported.
The bank disclosed the incident on 21 October 2026. Its preliminary review covered approximately 375,000 records, but that figure does not establish that 375,000 individual customers had their personal information exposed.