State Bank of India Reports Cyberattack Tied to 3,900 Records

State Bank of India, the country's largest lender by assets, has reported a cyberattack connected to nearly 3,900 customer records, according to Reuters. The agency's report, citing the bank's own disclosure, did not detail when the intrusion occurred or how it was discovered.

State Bank of India reported a cyberattack involving nearly 3,900 customer records, Reuters said.

What did State Bank of India disclose?

The bank acknowledged a cyberattack that touched a defined set of customer records, Reuters reported. The wire did not publish the text of SBI's statement, so the exact wording used by the bank — including whether it characterized the incident as a breach, an attempted intrusion, or an unauthorized access event — is not available in the available reporting.

How many customer records were affected?

Reuters put the number at nearly 3,900 records. The report did not specify whether that figure represents individual customers, accounts, or transaction entries, a distinction that matters for assessing scope but was not addressed in the source material.

What remains unknown about the breach?

Several questions are open. Reuters' report did not state what category of data was exposed — for example, whether the records included account numbers, balances, contact details, or credentials. It also did not say when the attack took place, how long it went undetected, or which systems were targeted. No timeline for remediation was given.

What has SBI said about customer protection measures?

No statement from the bank regarding specific remediation steps, customer notifications, or security upgrades appears in the available reporting. Large banks that disclose intrusions typically face follow-up questions from regulators and customers about containment and notification, but those details were not part of the Reuters dispatch reviewed for this report.

What should customers and investors watch for next?

The near-term signal to track is whether SBI, or India's banking and cybersecurity regulators, issue a fuller account of the incident — including scope, cause, and any required customer notifications. Reuters' initial report establishes only that the bank disclosed an attack tied to close to 3,900 records; additional confirmation of data type, timing, and response measures would need to come from SBI directly or from regulatory filings not yet referenced in the current coverage.

HTT News will follow the story as State Bank of India or Indian regulators release further details.