CyberPulse56 flagged the breach on Oct 16, claiming that the anonymous hacker collective Siriusim had extracted 380,000 customer records from the State Bank of India.
The dataset, reportedly in CSV format, also contains 2,722 PDF documents tied to loan applications and account openings—details that could fuel identity theft and fraudulent credit filings.
SBI has yet to confirm the infringement, and independent analysts warn that the sheer volume does not reveal how many unique customers are affected, as duplicates may exist.
RBI, which tightened cyber guidelines for commercial banks earlier this year, has now called for an immediate forensic audit, while the Reserve Bank of India’s cyber division will monitor the investigation.
A Delhi-based customer, Amrita Singh, said she noticed unfamiliar transactions on her account after the alleged leak, prompting her to file a complaint with the bank’s cyber‑security office.
The next step will see SBI’s internal security team and external cyber‑forensic firms comb through the alleged files, with a preliminary report due by the end of the month.