State-run Bank of Baroda has confirmed a cybersecurity incident following reports that customer data and internal documents were allegedly leaked on the dark web. The bank clarified that the breach was limited to the compromise of an employee's email account and did not affect its core banking infrastructure. It added that a forensic investigation has been launched to determine the scope of the incident while emphasizing that its core systems remain secure and operational.
In an official statement, the bank said it had promptly detected the compromise and initiated necessary response measures. "Bank of Baroda has robust information security protocols in place. The incident involved the compromise of an employee's email. The matter was identified promptly, necessary action has been initiated, the core banking system remains uncompromised, and a forensic review has been launched," the lender said. The statement was issued after media reports suggested that sensitive bank-related data had surfaced on the dark web.
According to reports, including Reuters, the leaked material allegedly includes customer information, identity documents, loan-related records, and internal audit files. Cybersecurity researcher Srikanth L., founder of Cashless Consumer, reportedly identified a data package exceeding 700 GB that appeared on a dark web marketplace. Preliminary findings cited in the reports indicate that the breach may have originated through the compromised email account rather than any intrusion into the bank's core banking infrastructure.
Also Read: Mojtaba Khamenei Issues 'Jihad' Message To Hezbollah Against US, Israel
Bank of Baroda has initiated a detailed forensic audit to establish the extent of the breach and assess whether any customer information was compromised. The bank has not yet disclosed the number of potentially affected customers or shared additional details about the ongoing investigation. It also remains unclear whether the incident has been formally disclosed to stock exchanges as investigations continue.
The incident adds to growing concerns over cybersecurity threats targeting major Indian organisations. Recent months have witnessed several high-profile cyber incidents involving large corporations and critical infrastructure, highlighting the increasing sophistication of cyberattacks. As digital banking and online financial services continue to expand, experts stress the importance of robust cybersecurity measures, continuous monitoring, and timely incident response to safeguard customer data and maintain trust in financial institutions.
Also Read: Kejriwal Launches Nationwide E20 Campaign, Announces Public Town Hall Initiative