State Bank of India Customer PII Data Leak Exposes Thousands of Account Holders

What happened

A data leak at State Bank of India resulted in the exposure of customer PII, including names, addresses, and account details. The breach was reported by Dark Reading and is attributed to an unknown attack vector, likely leveraging inadequate data handling or access controls.

Why it matters for trust and compliance

• The leak demonstrates why organizations must maintain continuous monitoring of privacy controls and retain defensible evidence of consent, encryption, and data minimization to satisfy GDPR and other privacy regimes.
• Demonstrates need for documented consent and data‑handling policies
• Supports audit‑ready evidence of encryption and access monitoring

Who is affected

Recommended actions

1. Review and tighten data classification, encryption, and access controls; document consent mechanisms; prepare DSAR response evidence