SBI notified 3,897 customers of breach only after rights groups pressured it

State Bank of India said it informed 3,897 affected customers via email and WhatsApp on October 23, two days after the Internet Freedom Foundation publicly demanded it. The data, including names, birth dates and addresses, appeared on BreachForums alongside 2,722 PDFs the bank has not verified.

• Breach exposed PII of 3,897 SBI customers
• About 375,000 records and 2,722 PDFs posted on BreachForums
• SBI notified customers on October 23, two days after IFF's demand
• DPDP customer-notification rules take effect only on May 13, 2027