Bank says customer balances and funds remain safe amid questions over breach communication
The State Bank of India (SBI) said on Friday, October 23, 2026, that it had individually informed all customers whose data was identified as being involved in a recent data breach. According to the bank, notifications were sent through email and/or WhatsApp.
The statement follows criticism over how SBI communicated the incident. The bank had faced questions about why it informed stock exchanges about the matter but was allegedly not informing affected customers directly.
SBI Reassures Customers About Account Security
In its statement, SBI reiterated that customers’ account balances and funds remained safe. The assurance was intended to address concerns arising from reports of the data breach.
The bank said its notifications were directed at customers whose data had been identified as part of the incident. However, the report provided does not specify the number of customers affected, the exact categories of data involved, or the technical cause of the breach.
It also does not provide further details about the timeline of the notifications or whether any misuse of customer information has been confirmed.
Why Direct Communication Matters
When a financial institution reports a data breach, customers need clear information about whether their personal details may have been exposed and whether any action is required from them. Timely, direct communication can help customers remain alert to suspicious messages, impersonation attempts and other potential risks.
Customers should be cautious about unexpected messages claiming to be from a bank. They should not share passwords, PINs, one-time passwords (OTPs) or other confidential banking credentials in response to unsolicited communications.
For businesses reviewing financial controls and risk-management processes, financial investigation services may be relevant when examining financial irregularities or investigating suspicious transactions.
Key Details Still Awaited
SBI’s statement confirms its position that identified customers were contacted and that account balances and funds remain safe. The available report, however, does not establish the full scope of the incident or provide independent technical findings about the breach.
Further details about the affected data, the incident’s cause and any confirmed misuse would help customers better understand the potential implications.