Customer data from India's Bank of Baroda leaked online, source and researcher say
The breach involved a compromised employee email account.
Photo by Reuters, Anushree Fadnavis.
- Bank of Baroda said a compromised employee email account exposed customer data and internal documents.
- The bank said its core banking systems were not accessed and remain secure.
- A researcher said leaked files include IDs, loan papers, audit records, and over 700GB of advertised data.
- The breach adds to rising cybersecurity concerns for Indian firms holding large amounts of sensitive data.
Key Takeaways by nexos.ai, reviewed by Cybernews staff.
Customer data from India's state-run Bank of Baroda, along with internal documents, has been leaked on the dark web, according to a source familiar with the matter and a cybersecurity researcher.
The lender said in a statement on Monday that it had launched a forensic investigation and was working with relevant authorities after initial containment measures were put in place.
The breach involved a compromised employee email account, which resulted in "unauthorized access to certain data," the Mumbai-based bank said.
"The bank's core banking systems were not accessed and continue to remain secure," it added.
The leaked data includes customer details, identification documents, loan papers, and internal audit records, said cybersecurity researcher Srikanth L, founder of Cashless Consumer.
It was not immediately clear how many customers were affected.
The Reserve Bank of India and India's cybersecurity regulator CERT-In did not immediately respond to requests for comment.
The leak comes amid growing concerns over cybersecurity risks facing large companies and financial institutions that store vast amounts of customer and business data.
The data appeared on a dark web site on Saturday night and was advertised as a cache containing more than 700GB of information, based on metadata analysis of the site, Srikanth said.
In June, a cyberattack on Apple supplier Tata Electronics led to component design and specification documents linked to Apple and Tesla being leaked on the dark web.
Earlier this month, ransomware group World Leaks posted files on the dark web related to India's largest nuclear plant.
Stay updated with our latest stories and follow us on social media
Be the first to discover new stories, ideas, and updates from our team.