MUMBAI — Confidential records belonging to an estimated 3.75 lakh State Bank of India customers have reportedly been accessed by an unauthorized threat actor, raising concerns over the security of sensitive banking documents. Cybersecurity monitoring group CyberPulse56 disclosed on social media platform X that a group operating under the name Siriusim claimed responsibility for obtaining the database, which reportedly encompasses more than 375,000 account entries alongside 2,722 PDF files. The compromised files allegedly contain personal background details, loan applications, supporting verification documents, residential addresses, and account-opening forms. However, the authenticity, origin, and exact scope of the alleged exposure remain independently unverified.
Alleged Exposure of Loan Records and Customer Documents
According to disclosures shared by CyberPulse56, the threat actor characterized the leaked information as an initial release of a broader repository. The reported presence of 2,722 PDF files forms the centerpiece of the alleged breach, as such documents frequently contain sensitive identification credentials and comprehensive financial profiles. It remains undetermined whether the materials were extracted directly from the primary digital infrastructure of the State Bank of India or collected through third-party platforms handling processing work.
Technical experts observe that the claimed figures represent uncorroborated allegations rather than an established audit of compromised records. It is currently unclear whether the dataset features duplicate entries, contains outdated application data, or genuinely corresponds to active customer accounts. No evidence has surfaced indicating that the records have been exploited to execute fraudulent monetary transactions or compromise live account balances.
Threat of Identity Fraud and Tailored Cybercrime
If the dataset proves authentic, the exposure of residential details and loan forms creates substantial vulnerabilities for targeted financial crime. Access to verified customer credentials enables fraudsters to design convincing impersonation schemes, posing as banking officers or credit verification agents. Such personal details allow cybercriminals to fabricate authentic-sounding pretexts, tricking account holders into surrendering one-time passwords, online banking login credentials, or debit card identification numbers under the guise of updating mandatory Know Your Customer records.
Personalized phishing operations pose particular hazards because communications containing correct applicant details appear legitimate to recipients. While direct systemic compromise has not been established, regulatory observers note that the growth of digital financial services across the country has made banking databases a prime objective for coordinated illicit operations.
Official Response Awaited as Customers Urged to Stay Alert
An official response from the State Bank of India was not immediately available following the emergence of the claims on social media. A comprehensive forensic assessment will be required to confirm whether bank networks suffered an intrusion, whether a security loophole was exploited, or if customer records originated from an external repository entirely outside internal banking servers. Without direct validation from the institution, conclusions regarding direct system infiltration remain premature.
In light of the reports, bank customers are advised to maintain strict security practices when receiving unsolicited telephone calls, text messages, or emails requesting financial information. Account holders should refuse requests to share passwords, one-time passwords, or personal identification codes with external parties, even when callers purport to represent banking institutions. Users are also cautioned against downloading unexpected attachments or making fee payments for loan processing, and they should monitor transaction statements regularly to identify and report unauthorized activity promptly.
Follow for daily updates on cybercrime, corporate fraud, DFIR, hacking, investigations, and digital forensics
