News · BFSI
State Bank of India is conducting a root cause analysis after a suspected cyberattack exposed 3,897 customer records containing personally identifiable information on the dark web.
✦ AI SUMMARY 30-second read
- SBI's root cause analysis of the suspected cyberattack is ongoing; 3,897 customer records were exposed on the dark web last month.
- Leaked data included customer names, mobile numbers, dates of birth, email addresses, residential addresses, brand and customer identifiers, and loan records.
- The bank says the incident is not expected to have any material impact on core business operations, financial performance or business continuity.
Why it matters: A breach at India's largest lender raises questions about data security safeguards at systemically important financial institutions.
This summary was generated by AI. Editors may review and update it.
State Bank of India, the country's largest lender, is investigating a suspected cyberattack that resulted in 3,897 customer records being leaked on the dark web. The breach was reported last month and involved personally identifiable information.
A root cause analysis is currently underway and is expected to take some time to conclude, the bank has indicated.
What was exposed
A preliminary analysis by the bank found that the compromised records contained customer names, mobile numbers, dates of birth, email addresses and residential addresses. Also included were brand and customer identifiers as well as loan records.
SBI has stated that the leak is not expected to have any material impact on its core business operations, financial performance or business continuity.
Q2 financial performance
Separately, SBI reported a 14 per cent year-on-year rise in standalone net profit to Rs 23,038 crore for the second quarter ended September 30, 2026, compared with Rs 20,160 crore in the same period a year earlier.
Total income for the quarter stood at Rs 1,43,796 crore, up from Rs 1,34,979 crore in the corresponding quarter of the previous fiscal year. Interest earned rose to Rs 1,32,019 crore from Rs 1,19,654 crore in the same quarter of FY26.
On a consolidated basis, SBI Group posted a 20 per cent rise in net profit to Rs 25,361 crore for the quarter, against Rs 21,137 crore in July-September FY26. Consolidated total income rose to Rs 1,87,756 crore from Rs 1,75,898 crore in the year-ago period.
Asset quality and capital position
The bank's gross non-performing assets fell to 1.39 per cent of gross advances as on September 30, 2026, down from 1.73 per cent a year earlier. Net NPAs moderated to 0.36 per cent of advances from 0.42 per cent.
Provisions for bad loans declined to Rs 2,759 crore from Rs 4,132 crore in the corresponding quarter of the previous year. The Capital Adequacy Ratio improved to 16.09 per cent from 14.62 per cent at the end of September 2025.
What happens next
The root cause analysis into the data breach remains in progress. Elets will update this story as further findings from the investigation become available.
