A claim that an unidentified hacker group has obtained 3.8 lakh data entries allegedly linked to State Bank of India remains unverified, leaving the scale and source of the purported exposure unclear. The claim has nevertheless raised concerns about the protection of customer information in India’s banking system.
The group, operating under the name ‘Siriusim’, allegedly presented the material as its first disclosure of a dataset containing personal details, loan applications, account-opening documents and related records. The claim was highlighted by Cyber Pulse56, a cybersecurity monitoring account, in a post on X.
According to Cyber Pulse56, the purported dataset includes about 3.8 lakh entries in CSV format and 2,722 PDF documents. The reported records are said to contain residential addresses, loan applications, supporting documents and other application-related information. The account first reported the claim on October 16.
The available information does not establish whether the material originated from SBI, another organisation involved in loan processing, or an unrelated source. There has also been no independent confirmation that SBI’s systems were compromised. The number of entries does not necessarily represent the number of affected customers, since multiple records could relate to the same individual.
The distinction is important because banking data often moves through several points in an application and servicing chain. Customer information may be handled by banks, technology providers, document-processing agencies, lending partners and other service providers. The supplied report does not identify the alleged source system or establish how the material may have been obtained.
If the dataset proves genuine and contains usable personal or financial information, the consequences could extend beyond unauthorised access. Cyber Pulse56 warned that the information could potentially be used for identity theft, targeted phishing, financial fraud and fraudulent loan applications. Residential addresses and loan-related documents can make social-engineering attempts more convincing by allowing attackers to tailor messages to individual customers.
The allegation also highlights a wider governance challenge for financial institutions: cybersecurity is not limited to protecting a bank’s central systems. It also involves monitoring vendors, access permissions, document repositories, data transfers and the retention of customer records across the wider service ecosystem. The supplied material, however, does not provide evidence about whether any such control failed in this case.
The report comes amid broader concerns about cybersecurity risks in India’s financial sector. It also notes that the Reserve Bank of India strengthened cybersecurity requirements for commercial banks earlier this year. Those requirements form part of the regulatory environment in which banks are expected to protect customer information and manage technology-related risks, although the supplied material does not link the alleged dataset to any specific regulatory breach.
At this stage, the central facts remain unresolved: whether the files exist in the form described, whether they contain genuine SBI customer information, how many individuals may be represented, and whether any bank or service-provider system was compromised. Confirmation from SBI, law-enforcement agencies, regulators or a verifiable technical analysis would be needed to establish the nature and extent of the alleged exposure.
