SBI has registered a police complaint in Navi Mumbai nearly a month after hackers accessed its Global IT Centre in CBD-Belapur and posted confidential bank data, including 3.75 lakh records and customer information, on the dark web.
The alleged cyber intrusion took place between October 10 and 15, while the State Bank of India filed the complaint at the CBD-Belapur police station on November 12. Police have registered a case against unknown persons linked to the hacker group ‘Siriusim’ and an IP address.
According to the complaint, the attackers accessed SBI’s centralised computer server at the Global IT Centre and removed approximately 32 CSV files containing around 3.75 lakh records from SBI applications. The stolen material also included JSON files and 2,721 PDF files containing personally identifiable information.
The records reportedly included personal details of SBI customers, loan application records, account-opening applications, contact information and addresses. The complaint also referred to 4,280 customer records among the files taken from the server.
Police officer Arun Pawar said bank officials noticed that the stolen data had been posted on the dark web. He said SBI’s internal team conducted an inquiry, removed the data from the dark web and found that it had not been misused. The bank subsequently registered the complaint so police could investigate the theft and identify those responsible.
The case has been filed under provisions of the Bharatiya Nyaya Sanhita relating to simple theft and criminal conspiracy, along with sections of the Information Technology Act. The accused have not been identified, and the police investigation is intended to trace the individuals behind the access and publication of the files.
Cybersecurity and privacy lawyer Prashant Mali said that removal of the material from the dark web did not rule out the possibility that copies could have been sold or circulated elsewhere. He advised SBI customers to remain alert to phishing attempts and other cyber attacks.
The incident places a major banking technology facility and the handling of customer information under police scrutiny. The immediate investigation will focus on how the server was accessed, how the files were taken and posted, and whether any customer data was subsequently used or distributed. Police have not announced arrests in the case.
