NEW DELHI — A hacker group identifying itself as Siriusim has claimed to possess hundreds of thousands of customer records and confidential documents allegedly associated with the State Bank of India (SBI), raising concerns about a potential exposure of sensitive financial information.
The group claims to have obtained approximately 375,000 data entries in CSV format and 2,722 PDF documents containing personal information, loan applications, residential addresses and account-opening records.
The alleged data exposure was highlighted by cybersecurity monitoring account CyberPulse56 on social media platform X.
CyberPulse56 first reported the claims on October 16, stating that Siriusim had presented the material as its initial disclosure of the dataset.
According to the monitoring account, the allegedly compromised files include customer identification details, supporting financial documents and other records associated with banking applications.
However, the authenticity of the information and its source have not been independently verified. There is also no confirmation that SBI’s internal systems were breached or that the documents were obtained directly from the bank.
The reported 375,000 entries do not necessarily represent an equivalent number of affected customers, as multiple records could belong to the same individual.
The Economic Times reported Tuesday that SBI had not responded to an emailed request for comment before publication.
CyberPulse56 warned that the information, if authentic, could expose customers to identity theft, financial fraud, targeted phishing campaigns and fraudulent loan applications.
Personal information combined with banking documents can be particularly sensitive because criminals may use such records to impersonate customers or attempt unauthorized financial transactions.
The allegations come as India’s banking industry faces growing pressure to strengthen cybersecurity protections amid increasing digital financial activity.
Earlier this year, the Reserve Bank of India introduced additional cybersecurity requirements for commercial banks as part of broader efforts to improve the financial system’s resilience against digital threats.
SBI, India’s largest public sector bank, has not publicly confirmed the alleged incident, and no independently verified evidence has established that its systems were compromised.
The claims remain unsubstantiated pending further investigation or an official response from the bank. (Source: IANS)
