Cyberattack Hits Belapur Nationalised Bank; Data of 4,280 Customers Stolen -

Cyberattack Hits Belapur Nationalised Bank; Data of 4,280 Customers Stolen

FIR, CBD Police

A hack on a nationalized bank’s data center in CBD Belapur allegedly resulted in the theft of sensitive data associated with about 4,280 clients. Some of the affected material was then shared on the dark web.

What happened?

Between October 9 and October 15, 2026, the accused reportedly obtained unauthorized access to the bank’s servers,
And extracted several files that included private client data.
Affected consumers are at risk of identity theft and financial fraud due to the breach, which has sparked worries about potential misuse of personal and financial information.

FIR

A number of sizable data files and 2,721 scanned documents 658 of which were duplicates were among the stolen materials. There were apparently 4,280 client records with Personally Identifiable Information (PII) in the exposed data.

The information allegedly accessed included:

Personal Details,
Loan Application Records,
Account-Opening Forms,
Contact Numbers and
Residential Addresses.

Concerns that the information might be sold, used for impersonation, or used to target customers through fraudulent calls and texts have increased due to the dissemination of some of these facts on the dark web.

The bank stated in its police complaint that it was still determining the scope of the breach, including whether other types of data had been accessed and whether the event had caused any additional losses.

It cautioned that the stolen data might be used improperly or sold without permission, putting clients at risk of financial theft and harming the bank’s reputation.

Along with unidentified individuals, the FIR cites a cyber gang or individual using the moniker “Siriusim.” The accused may have plotted to obtain unauthorized access to the bank’s servers and steal confidential data, according to the authorities.

On November 12, the case was filed at the CBD police station under Bharatiya Nyaya Sanhita (BNS) sections 303(2) (stealing) and 61(2) (criminal conspiracy). Additionally, the accused have been charged under Sections 43(a), 43(b), 43(c), 66, and 66C of the Information Technology Act, which address identity theft, computer-related offenses, virus introduction, and unauthorized access and extraction of data.

Safeguards for 4,280 consumers following the data incident have not yet been clarified by the bank.

About The Author

Suraj Koli is a content specialist in technical writing about cybersecurity & information security. He has written many amazing articles related to cybersecurity concepts, with the latest trends in cyber awareness and ethical hacking. Find out more about “Him.”