The State Bank of India (SBI) has confirmed a cyber incident involving the suspected exposure of 3,897 customers’ personal information on the dark web. The leaked data reportedly includes registered mobile numbers, gender, email IDs, dates of birth and residential addresses.

In a filing with stock exchanges, SBI said the incident had not materially affected its core banking operations, financial performance or business continuity. “We wish to submit that this does not have any material impact on Bank’s Core business operations, financial performance or business continuity,” the bank said. “The Bank’s core business functions continue to operate normally without disruptions,” it added.

On Friday, October 16, SBI said it received an alert about the suspected data exposure from its Threat Intelligence Service Provider, CERT-In and the Defence Cyber Agency. A preliminary analysis of around 3,75,000 records found on the dark web identified personally identifiable information (PII) belonging to 3,897 customers.

The exposed records also contained lead IDs, CIF identifiers and metadata linked to loan and lead records, along with other related files, according to the bank.

SBI said on Wednesday that it had activated its cyber incident response measures and engaged an independent cybersecurity agency to investigate the suspected breach.

The detailed investigation will verify the authenticity of the data found on the dark web. It will also establish the possible source, nature and extent of the exposure and assess the risks to customers.

“The Bank promptly activated its cyber incident response and containment protocols,” SBI said in its exchange filing.