Winning Bizness Desk
Mumbai.A massive alleged data breach involving Bank of Baroda has raised fresh concerns over cybersecurity in India's banking sector after sensitive customer information and internal bank records reportedly surfaced on the dark web. Cybersecurity researchers and sources familiar with the matter claimed that more than 700GB of confidential data, including personal customer details, loan documents and internal audit records, has been advertised for sale. While the bank has reportedly initiated a forensic audit to investigate the incident, it has not yet disclosed the scale of the breach or the number of customers who may have been affected.
Sensitive records reportedly offered for sale
According to cybersecurity researcher Srikant L, founder of Cashless Consumer, the leaked cache contains customer identification documents, personal information, loan-related paperwork and confidential internal audit records. Based on metadata analysis of a dark web portal, he said the data first appeared online on Saturday night and was being advertised as a cache exceeding 700GB.
A source associated with the investigation confirmed that Bank of Baroda has launched a forensic audit to determine the source and extent of the breach. However, the lender has not yet informed stock exchanges about the incident, nor has it clarified how many customers could have been impacted.
Compromised email system under scanner
Preliminary findings suggest that the breach may have originated from a compromised corporate email system, allowing hackers to gain unauthorised access to sensitive banking information.
Investigators are currently examining:
- Whether hackers entered the bank's network through an email account.
- The exact nature of the customer data exposed.
- Whether any financial transactions were compromised.
- The duration for which attackers had access to internal systems.
The forensic audit is expected to reconstruct the sequence of events, identify security gaps and determine whether negligence or external cyber intrusion was responsible for the incident.
Silence from regulators and bank
Despite the seriousness of the alleged breach, there has been no official statement so far from Bank of Baroda, the Reserve Bank of India (RBI) or the Indian Computer Emergency Response Team (CERT-In). The absence of formal confirmation has left customers waiting for clarity on whether their personal or financial information has been exposed.
The incident comes at a time when financial institutions and large corporations are facing increasingly sophisticated cyberattacks targeting vast repositories of customer data and confidential business records.
Recent cyber incidents raise alarm
The alleged breach follows several high-profile cybersecurity incidents reported in recent months.
Among them:-
- A cyberattack on Apple supplier Tata Electronics reportedly led to confidential design and specification documents linked to Apple and Tesla appearing on the dark web.
- Earlier this month, the ransomware group World Leaks allegedly uploaded files linked to India's largest nuclear power plant onto the dark web.
Security experts say such incidents underline the growing risks posed by organised cybercriminal groups targeting critical infrastructure and financial institutions.
Customers urged to stay alert
A forensic audit is a detailed technical investigation carried out to establish how a cyberattack occurred, trace the source of a data leak and preserve evidence for legal and regulatory action. The dark web, meanwhile, is a hidden section of the internet that cannot be accessed through conventional search engines and is often associated with illegal trade, stolen data and cybercrime.
As a precaution, Bank of Baroda customers have been advised to:
- Change their net banking passwords, mobile banking credentials and ATM PINs immediately.
- Never share OTPs, CVV numbers or account details through calls, messages or emails.
- Stay alert against phishing attempts, as banks do not seek confidential information over the phone.
Experts also recommend closely monitoring bank accounts for suspicious activity until the investigation establishes the full extent of the alleged breach.
