The State Bank of India (SBI) has initiated contact with customers whose data was involved in a recent cyber incident. The bank communicated with affected individuals through email and WhatsApp, reiterating that all customer account balances and funds remain entirely safe and secure.
In an update shared on October 23, 2026, SBI confirmed it had individually notified those customers whose data was identified as being compromised. This communication follows earlier public statements from the bank concerning the cybersecurity issue.
Vigilance Urged: SBI's Digital Banking Safety Advisory
Alongside informing affected customers about the cyber incident, SBI issued a comprehensive advisory on safe digital banking practices. The bank strongly cautioned customers against sharing sensitive banking credentials with anyone, emphasizing the importance of protecting one-time passwords (OTPs), personal identification numbers (PINs), and account passwords.
Customers are also advised to remain alert to suspicious phone calls, messages, and emails that could be linked to potential fraud attempts. Cybercriminals frequently employ phishing techniques, impersonation calls, and fraudulent links to trick individuals into revealing confidential banking information. Such attempts may involve fraudsters posing as bank representatives and requesting verification details or authentication credentials.
SBI's advisory specifically reminds customers to:
- Verify the authenticity of any suspicious communications before responding.
- Never share confidential banking credentials, even with individuals claiming to represent the bank.
- Avoid clicking on unknown links received via SMS, email, or WhatsApp.
- Not disclose OTPs, PINs, or passwords over phone calls or messages.
Any unauthorized transactions or suspected fraud should be reported to the bank immediately through its official channels.
Unconfirmed Details of the Cyber Incident
While SBI has confirmed the safety of customer funds, the bank's public updates have not specified the technical nature of the cyber incident, the precise number of customers whose data was involved, or the exact categories of information that were affected. Investigations into the full scope of the incident are presumed to be ongoing.