Desk note · industry · Banking / cybersecurity
Reporting on 20 October 2026 said a threat actor called Siriusim claimed to have published 375,000 CSV rows and 2,722 PDF documents with personal and loan-related details tied to State Bank of India customers; SBI had not publicly confirmed the leak and the authenticity of the data remained unverified.
On 20 October 2026, Mint cited cybersecurity monitors who said a threat actor using the name Siriusim claimed to have leaked customer information tied to State Bank of India. The post, surfaced by the CyberPulse56 account on X, dated the alleged release to 16 October 2026. The claimed cache includes about 375,000 comma-separated rows and 2,722 PDF files with personal details, loan applications, supporting documents, addresses, and other onboarding paperwork. The actor described it as a first tranche and did not explain how the files were obtained. Reporters noted that the authenticity of the dump and any breach at SBI were unverified, and the bank had not issued a public confirmation by the time the story ran. The headline sits beside wider October warnings that Indian lenders and fintech partners face credential-theft attacks on payment APIs.
Even unverified leak claims can trigger phishing waves if criminals reuse real-looking account numbers or old application forms. Banks typically investigate by matching sample records to internal logs, rotating API keys, and alerting regulators if personal data is confirmed exposed. Customers should treat unexpected loan-offer calls or KYC reset messages as suspicious until the bank publishes official guidance. For the sector, the episode adds pressure on state-run and private lenders to tighten vendor access, log retention, and breach disclosure timelines under India’s digital personal data rules.
If you bank with SBI or recently applied for a loan there, watch only official SMS, app, and website notices before sharing OTPs or documents. Enable transaction alerts, change passwords if you reused them on third-party sites, and report unfamiliar credit inquiries. If you work at a lender or fintech, rerun API key reviews and partner-bank credential maps in light of CERT-In’s 9 October advisory. Track any SBI exchange or regulator statement, police cyber-cell updates, and whether CERT-In elevates the incident from social-media claim to confirmed breach.
Trade policy / exports
Commerce minister Piyush Goyal said on 22 October 2026 that India’s proposed free-trade agreement with the European Union could become operational within four to five months after signing, with the deal expected to be inked before year-end during his visit to Germany.
Food delivery / quick commerce
Swiggy reported on 22 October 2026 that September-quarter revenue rose 36% to about ₹7,571 crore and the consolidated net loss narrowed to ₹922 crore, as food delivery posted record adjusted core profit of about ₹349 crore while quick-commerce Instamart lost about ₹764 crore at the segment level amid heavier discounting and 69 new dark stores.
Quick-service restaurants / consumers
KFC and Pizza Hut operator Sapphire Foods India said on 22 October 2026 that September-quarter consolidated restaurant sales rose 20% year on year to about ₹885 crore, with KFC India same-store sales up 14% and adjusted EBITDA margin expanding 100 basis points to 7.1% even as the listed stock remained far below its 52-week high.
RBI / government borrowing
On 22 October 2026, the Reserve Bank of India accepted no bids at the scheduled sale of short-dated government treasury bills, the first full cancellation in about seven months, as investors demanded higher yields amid a bond selloff, oil-linked inflation fears, and expectations of more rate hikes after October’s policy minutes.
For informational purposes only. Not investment advice. Verify with filings and a licensed adviser.