Someone leaked thousands of user records online, including many belonging to SBI customers.