An unidentified hacker group operating under the name Siriusim has claimed to possess a large collection of confidential customer records allegedly linked to the State Bank of India (SBI), raising concerns about the potential exposure of sensitive personal and financial information.
The claim was highlighted by cybersecurity monitoring account CyberPulse56 on X and reported by several Indian news outlets on October 20 and 21, 2026. According to these reports, the group claims to have obtained more than 375,000 data entries in CSV format and 2,722 PDF documents allegedly associated with SBI. However, the authenticity and origin of the dataset have not been independently verified.
The allegedly exposed information is reported to include customers’ personal details, residential addresses, loan applications, account-opening forms, supporting documents and other application-related records. CyberPulse56 reportedly first raised the issue on October 16, describing the material as an initial disclosure of the dataset.
Despite the reported volume of information, it remains unclear whether the records are genuine, whether they contain current customer data or how they may have been obtained. The figure of 375,000 refers to claimed data entries, not a verified count of affected customers, as multiple records could belong to the same individual.
The reports have not established that SBI’s internal systems were compromised or that the documents originated directly from the bank. As of the latest reporting reviewed on October 21, the allegation remained unconfirmed. The Economic Times reported on October 20 that it had not received a response from SBI to its request for comment by publication time. No independent technical evidence has been presented in the available reporting to establish the scope or source of the alleged exposure.
If the data proves authentic, the exposure of personal details and banking application documents could create opportunities for identity theft, targeted phishing, financial fraud and attempts to submit fraudulent loan applications. Criminals may use personal information to impersonate bank representatives or create convincing messages designed to trick customers into revealing confidential information.
SBI customers should remain cautious about unexpected calls, emails and text messages claiming to be from the bank. Customers should never share their passwords, PINs or one-time passwords (OTPs), and should avoid clicking suspicious links or downloading unexpected attachments. Anyone who suspects that their banking information has been misused should contact the bank through its official website, app or verified customer support channels.
If this article helped you, please consider supporting our work. Every small contribution keeps Abijita.com independent and running.
Sources
- The Economic Times — SBI data breach claim, October 20, 2026.
- The Times of India — Hacker group claims access to SBI data entries, October 21, 2026.
- Outlook Money — SBI data leak claim and 2,722 PDFs, October 20, 2026.
