Bank of Baroda Confirms Email Breach, Core Systems Safe After Dark Web Data Leak
State-run Bank of Baroda has acknowledged a cybersecurity incident following reports that customer data and internal documents were posted on the dark web. The bank has assured that its core banking systems remain secure and unaffected.
In an official statement, the bank clarified that the breach involved a single employee's email account, not its main banking infrastructure. 'Bank of Baroda has robust information security protocols in place. The incident involved the compromise of an employee's email. The matter was identified promptly, necessary action has been initiated, the core banking system remains uncompromised, and a forensic review has been launched,' the bank said.
The statement came after media reports, citing a source familiar with the matter and cybersecurity researcher Srikanth L of Cashless Consumer, claimed that customer data and internal records linked to the bank had appeared on the dark web. According to Reuters, the leaked material allegedly includes customer information, identity documents, loan papers, and internal audit records. Early findings suggest the breach stemmed from a compromised email system rather than the bank's core infrastructure.
The information was reportedly posted on a dark web marketplace on Saturday night, advertised as a package exceeding 700 GB, based on metadata analysis by Srikanth L. Bank of Baroda has initiated a forensic audit to assess the extent of the incident. It remains unclear how many customers, if any, have been affected. The bank has not shared further details of its investigation nor informed stock exchanges about the matter.
This incident adds to a series of cybersecurity breaches involving major Indian companies and institutions in recent months. In June, a cyberattack on Apple supplier Tata Electronics led to confidential design documents being leaked on the dark web. Earlier this month, the ransomware group World Leaks published files allegedly related to India's largest nuclear power plant.