The State Bank of India (SBI) may have experienced a security compromise following reports of a potential data breach. A threat actor operating under the name Siriusim has asserted that the alleged breach puts the confidential information of roughly 3.75 lakh bank customers at risk.
The incident first came to light through a cybersecurity monitoring account on the social media platform X, formerly known as Twitter. Subsequently, the hacking collective made its claims public on BreachForums, a known dark web platform. The group asserts that its possession includes over 375,000 rows of data structured in comma-separated values format alongside more than 2,700 PDF documents.
As of the time of reporting, the banking institution has not issued an official statement regarding the allegations. Independent verification of the breach and its authenticity has not yet been established, leaving questions about whether the data is newly acquired or originates from older, recycled leaks.
According to details shared by the threat actor, the compromised dataset supposedly incorporates personal details, loan applications, and accompanying paperwork. Furthermore, if the claims prove accurate, the files may house critical Know Your Customer documentation, residential addresses, and account-opening paperwork. Four sample customer files were published by the group to substantiate their claims.
Experts note that if the leak is verified as genuine, the exposed information could potentially be exploited for financial fraud, identity theft, and targeted phishing campaigns. Malicious actors could also leverage the leaked personal identifiers alongside advanced artificial intelligence tools to craft convincing scams.
This incident follows prior cybersecurity concerns within the Indian banking sector. Earlier in the year, another major public sector lender acknowledged a significant data leak that exposed a terabyte of customer information, while vulnerabilities in digital banking applications have also drawn scrutiny in the past.