State Bank of India (SBI) has confirmed the suspected exposure of nearly 3,900 customer records containing personally identifiable information on the dark web, following claims by a hacking group that it had obtained a much larger volume of the lender’s data.