Bank of Baroda has reportedly become the target of a major cyberattack. According to reports, a hacker has claimed to have breached the bank’s systems and released around 1TB of sensitive data on the dark web for free. The alleged leaked data is said to contain both personal and corporate banking information collected from multiple Bank of Baroda branches across India.
At present, Bank of Baroda has not officially confirmed the alleged breach. There has also been no statement from the Indian Computer Emergency Response Team (CERT-In) or the Reserve Bank of India (RBI) regarding the incident. Therefore, the claims have not yet been independently verified by the authorities.
What Data Has Allegedly Been Leaked?
The hacker claims that the leaked database contains a wide range of sensitive banking records. According to the claims, the data includes:
- Customer names and Aadhaar numbers
- Savings and current account records
- Loan-related documents
- NetBanking user details
- NRI and corporate banking service records
- Customer support documents
- Branch and ATM-related records
The hacker has also reportedly uploaded sample documents online to support the claim that the data is genuine.
Sample Documents Shared Online
Software engineer and Cashless Consumer founder Srikanth Lakshmanan shared screenshots of the alleged leaked documents on the social media platform X. He stated that the download link was active when he checked it.
Speaking to India Today Tech, Srikanth described the incident as “a cyber disaster.” He further stated that he was able to verify some of the leaked documents and found several internal Bank of Baroda records.
According to him, the leaked material reportedly includes:
- Branch audit reports
- Loan appraisal documents
- Internal communications
- Vigilance investigation records
- bobWorld audit reports
- Customer application forms from multiple Bank of Baroda branches across the country
When Was the Breach First Reported?
According to Srikanth Lakshmanan, the alleged breach was first identified on Saturday, 25 July, by the dark web monitoring website ransomeware.live, which tracks ransomware and data leak incidents.
Which Hacking Group May Be Responsible?
No hacker or hacking group has officially claimed responsibility for the alleged attack. However, Srikanth Lakshmanan believes that a relatively new hacking group known as TripleX could be behind the incident.
He stated that the same group had previously targeted a major Indonesian bank and had reportedly made the entire Bank of Baroda dataset available on a Tor website.
TripleX’s Previous Attack
Earlier in May this year, the TripleX group allegedly hacked PT Bank Negara Indonesia, one of Indonesia’s largest state-owned banks. During that incident, the hackers reportedly stole around 2TB of data, including contracts, customer identification details, financial transaction records, and confidential internal banking documents.
Growing Cybersecurity Concerns
The alleged Bank of Baroda incident has raised fresh concerns about cybersecurity in the banking sector. Banks across the world are facing increasing cyber threats, making customer data protection more important than ever.
Reports also mention that AI-based security systems, including Claude Mythos, had previously warned about growing cyber risks. Indian financial institutions have also been advised to strengthen their cybersecurity systems and implement proper safeguards to protect customer information.
Previous Security Incident
Although there has been no confirmed recent breach of Bank of Baroda’s internal systems, the bank was linked to another cybersecurity issue in September 2025.
At that time, cybersecurity firm UpGuard reported that an exposed third-party cloud database contained more than 2,73,000 Indian banking records, around 6,000 of which were linked to Bank of Baroda. However, that incident involved a third-party system and not the bank’s own internal infrastructure.
Bank Yet to Issue Official Statement
As of now, Bank of Baroda has not issued any official statement regarding the alleged cyberattack or the reported data leak. Similarly, CERT-In and the Reserve Bank of India have not confirmed the incident.
Customers are advised not to panic but should remain cautious. They should regularly monitor their bank accounts, avoid sharing banking credentials with anyone, and immediately report any suspicious activity to the bank. Until an official investigation is completed, the authenticity and full impact of the alleged data leak remain unconfirmed.
