A hacker group operating under the name 'Siriusim' has allegedly claimed possession of confidential customer data purportedly linked to the State Bank of India (SBI), India's largest public sector lender, including personal information, loan applications and account-opening documents. The claim surfaced on 20 October 2026 and remains unverified, with SBI yet to issue any official response.

What the Hackers Claim

According to cybersecurity monitoring account CyberPulse56, which flagged the claim in a post on social media platform X, the group allegedly holds 3.75 lakh data entries in CSV format alongside 2,722 PDF documents purportedly associated with the bank. CyberPulse56 first reported the claim on 16 October, noting that Siriusim had presented this as its first public disclosure of the dataset.

The allegedly exposed material is said to contain customers' personal details, residential addresses, loan applications, supporting documentation and other application-related records. Notably, the reported number of entries does not directly indicate how many individual customers may be affected, as multiple records could relate to the same person.

Key Caveats: Authenticity Unverified

Crucially, there has been no independent confirmation that SBI's systems were compromised or that the documents originated directly from the bank. The authenticity and origin of the alleged dataset remain unestablished. SBI had not responded to a request for comment by the time of this report's publication.

The reported claim alone does not constitute evidence that a breach of SBI's infrastructure has occurred. Cybersecurity experts routinely caution that such allegations by threat actors can involve data aggregated from multiple third-party sources or earlier leaks rather than direct intrusions of the named institution.

Potential Risks If Data Is Genuine

CyberPulse56 warned that, should the dataset prove authentic, the information could potentially be exploited for identity theft, financial fraud, targeted phishing attacks and fraudulent loan applications. Customers whose loan applications or account-opening documents are exposed face heightened risk of impersonation and credit fraud.

Broader Context: RBI Tightens Cyber Norms

The allegation arrives against a backdrop of mounting cybersecurity pressure on India's financial sector. Earlier this year, the Reserve Bank of India (RBI) significantly stepped up cybersecurity requirements for commercial banks as part of wider efforts to harden the banking system against digital threats. The directive reflected regulator-level recognition that threat actors are increasingly targeting financial institutions' customer data repositories.

This is not the first time a major Indian financial institution has been named in unverified data-breach claims — a pattern that underscores both the persistence of threat actors targeting high-value institutions and the difficulty of authenticating such allegations without institutional disclosure. Whether SBI formally acknowledges or refutes the claim will be closely watched by cybersecurity researchers and customers alike.