SBI probes 3,897 customer records on the dark web as eight eMudhra web security keys leak
The Hindu reported that State Bank of India (SBI) is probing the dark web exposure of nearly 3,900 customer records. A preliminary analysis of around 3.75 lakh records available on the dark web identified 3,897 SBI customer records. The Hindu separately reported that eight web security keys of eMudhra were leaked. The paper said many government websites use eMudhra certificates. These include the Aadhaar issuer UIDAI and the income tax filing portal. The firm's certificates are used by government departments and PSUs, according to The Hindu.
Customer records on the dark web can be used for phishing or impersonation. Leaked web security keys matter because they are used to prove a website's identity, so their exposure raises questions about trust in sites that rely on them.
If you bank with SBI, be careful with calls and messages asking for OTPs or card details. Use only official channels for any alert about your account.
The bank's probe signals that it is treating the exposure seriously and checking which records are involved. The preliminary count of 3,897 records is small against the 3.75 lakh analysed.
The fact that data and keys appeared at all raises concern about how security is managed at institutions the public depends on. The reports seen do not say how the data was obtained.
Confirmed by The Hindu: the probe, the 3,897 figure and the eMudhra key leak. Not confirmed: the source of the leak, any fraud losses, or whether the keys were misused. Today, watch for statements from SBI, eMudhra or UIDAI.
DailyDrop India edition No. 18 · Morning · THU., OCT. 22, 2026