Police in Navi Mumbai have registered a case after an alleged SBI cyber attack at the bank’s Global IT Centre in CBD Belapur, where about 375,000 records from the YONO 2.0 and RAAS applications were reportedly accessed and taken without authorisation. The complaint also alleges that the data was circulated on the dark web.
The case was registered by CBD police against unidentified persons after the State Bank of India’s information technology facility reported unauthorised access to its servers. The centre handles technology infrastructure for a bank whose digital platforms serve customers across India, making the alleged intrusion a significant cybersecurity incident involving critical banking infrastructure.
According to the complaint cited in the report, the suspected intrusion took place between 4.13 pm on October 9 and 6 pm on October 15, 2026. The SBI Global IT Centre is located on Plots 8, 9 and 10 in Sector 11, CBD Belapur, Navi Mumbai.
The affected applications named in the complaint are YONO 2.0 and RAAS. The report says the alleged unauthorised access enabled unknown individuals to reach important information within the bank’s digital systems and extract data. The complaint puts the number of records involved at approximately 3.75 lakh.
The complaint has also raised suspicion about a person or hacking group known as “Siriusim” and an unidentified individual using the IP address 64.105.72.172. These references are part of the allegations under investigation and do not establish the identity or responsibility of any person or group.
The alleged circulation of the stolen information on the dark web adds a further concern because the incident involves systems connected to digital banking operations. However, the supplied report does not establish the exact nature of the records, whether customer accounts were financially accessed, or whether any transactions were affected. It also does not provide a statement from SBI detailing the scope of the incident or the safeguards being implemented.
The case places attention on the security of large technology facilities embedded within urban banking networks. The Global IT Centre in CBD Belapur is not a customer-facing branch, but its systems support digital services used by a large customer base. An intrusion at such a facility can therefore raise questions about access controls, incident detection, data governance and the coordination required between a bank and law-enforcement agencies.
CBD police have begun investigating the alleged breach and the unidentified persons named in the case. The next official findings will need to establish how access was obtained, what information was removed, whether the data was actually published online, and whether customers or banking operations were affected.
