Bank of Baroda customer data leaked online, bank launches forensic investigation

Bank of Baroda customer data leaked after a compromised employee email account resulted in unauthorised access to certain data, according to the bank. The state-run lender said it has launched a forensic investigation and is working with relevant authorities after implementing initial containment measures.

The incident came to light after customer data and internal documents reportedly appeared on the dark web, raising fresh concerns about cybersecurity risks facing financial institutions that store large volumes of sensitive information.

Bank of Baroda customer data leaked after employee email account compromised

According to the bank, the breach was linked to a compromised employee email account that resulted in unauthorised access to certain data. However, the lender clarified that its core banking systems were not accessed and continue to remain secure.

The Mumbai-based bank said it has already begun a forensic investigation while coordinating with the relevant authorities to assess the incident.

What information was reportedly exposed?

According to cybersecurity researcher Srikanth L, founder of Cashless Consumer, the leaked information includes customer details, identification documents, loan papers and internal audit records.

It was not immediately clear how many customers may have been affected by the incident.

Reportedly leaked data includes

• Customer details
• Identification documents
• Loan papers
• Internal audit records

Data reportedly appeared on the dark web

The cybersecurity researcher said the data appeared on a dark web site on Saturday night. Based on metadata analysis, the cache was advertised as containing more than 700 gigabytes of information.

The report did not specify how much of the advertised data had been verified.

Bank issues official statement

In its statement, Bank of Baroda said it had initiated a forensic investigation after implementing initial containment measures. The bank also said it is working with the relevant authorities to examine the incident.

The lender further stated that its core banking systems were not accessed and remain secure despite the unauthorised access involving an employee email account.

Regulators yet to comment

The Reserve Bank of India and India’s cybersecurity regulator CERT-In did not immediately respond to requests for comment.

Cybersecurity concerns continue to grow

The reported leak comes amid increasing concerns over cybersecurity threats targeting large companies and financial institutions that store significant amounts of customer and business information.

In June, a cyberattack on Apple supplier Tata Electronics reportedly resulted in component design and specification documents linked to Apple and Tesla being leaked on the dark web.

Earlier this month, ransomware group World Leaks also posted files on the dark web related to India’s largest nuclear plant.

Important Facts

• Bank of Baroda confirmed unauthorised access through a compromised employee email account.
• The bank said its core banking systems were not accessed and remain secure.
• A forensic investigation has been launched.
• The bank is working with relevant authorities.
• Reportedly leaked data includes customer details, identification documents, loan papers and internal audit records.
• The leaked data was advertised as containing more than 700GB of information.
• The number of affected customers has not been disclosed.