Bank of Baroda has confirmed data leak. According to reports, a hacker has claimed to have breached the bank’s systems and released around 1TB of sensitive data on the dark web for free. The alleged leaked data is said to contain both personal and corporate banking information collected from multiple Bank of Baroda branches across India.
Read what BoB said
Bank of Baroda said – The Bank has robust information security protocols in place. The incident involved compromise of an employee’s email account, resulting in unauthorised access to certain data. The matter was promptly identified, and immediate containment measures were implemented. The Bank’s core banking systems were not accessed and continue to remain secure.
A comprehensive forensic investigation has been initiated, and the Bank is working closely with the relevant authorities in accordance with applicable regulatory requirements.
The Bank remains committed to maintaining the highest standards of information security and to safeguarding the trust of its customers and stakeholders.
What Data Has Allegedly Been Leaked?
The hacker claims that the leaked database contains a wide range of sensitive banking records. According to the claims, the data includes:
- Customer names and Aadhaar numbers
- Savings and current account records
- Loan-related documents
- NetBanking user details
- NRI and corporate banking service records
- Customer support documents
- Branch and ATM-related records
The hacker has also reportedly uploaded sample documents online to support the claim that the data is genuine.
Sample Documents Shared Online
Software engineer and Cashless Consumer founder Srikanth Lakshmanan shared screenshots of the alleged leaked documents on the social media platform X. He stated that the download link was active when he checked it.
Speaking to India Today Tech, Srikanth described the incident as “a cyber disaster.” He further stated that he was able to verify some of the leaked documents and found several internal Bank of Baroda records.
According to him, the leaked material reportedly includes:
- Branch audit reports
- Loan appraisal documents
- Internal communications
- Vigilance investigation records
- bobWorld audit reports
- Customer application forms from multiple Bank of Baroda branches across the country
When Was the Breach First Reported?
According to Srikanth Lakshmanan, the alleged breach was first identified on Saturday, 25 July, by the dark web monitoring website ransomeware.live, which tracks ransomware and data leak incidents.
Which Hacking Group May Be Responsible?
No hacker or hacking group has officially claimed responsibility for the alleged attack. However, Srikanth Lakshmanan believes that a relatively new hacking group known as TripleX could be behind the incident.
He stated that the same group had previously targeted a major Indonesian bank and had reportedly made the entire Bank of Baroda dataset available on a Tor website.
