Back Businesstimes-Bd

Bank of Baroda Data Breach: Customer Details Leaked on Dark Web

Businesstimes-Bd • July 27, 2026

Published by Ghulam Faruque Alam and Printed at Sariatpur Printing Press 28/B Toyenbee Circular Road,Dhaka-1000 and on behalf of HRC Media Ltd. 9/F, HRC Bhaban, 46 Kawran Bazar Dhaka-1215

Phone No: 02-41010655 Mobile No: 01841011947, 01841042595 E-Mail: [email protected]

Customer data and internal documents from India's state-run Bank of Baroda have been leaked on the dark web, according to a source familiar with the matter and cybersecurity researcher Srikanth L, founder of Cashless Consumer. The leaked data reportedly includes customer details of identification documents, loan papers and internal audit records. A source confirmed the leak and said the bank is now conducting a forensic audit. The number of customers affected remains unclear, and Bank of Baroda has not informed stock exchanges of any breach. The bank, the Reserve Bank of India, and India's cybersecurity regulator CERT-In did not immediately respond to requests for . Preliminary findings suggest the breach originated from a compromised email system, the source said. The data surfaced on a dark web site on Saturday night, advertised as a cache of over 700 gigabytes, based on metadata analysis reviewed by Srikanth. The incident adds to growing concern over cybersecurity risks facing large companies and financial institutions that store vast amounts of customer and business data. This follows a string of recent breaches in India. In June, a cyberattack on Apple supplier Tata Electronics led to the leak of component design and specification documents linked to Apple and Tesla. Earlier this month the ransomware group World Leaks posted files related to India's largest nuclear power plant, Kudankulam on the dark web.

A source confirmed the leak and said the bank is now conducting a forensic audit. The number of customers affected remains unclear, and Bank of Baroda has not informed stock exchanges of any breach. The bank, the Reserve Bank of India, and India's cybersecurity regulator CERT-In did not immediately respond to requests for . Preliminary findings suggest the breach originated from a compromised email system, the source said. The data surfaced on a dark web site on Saturday night, advertised as a cache of over 700 gigabytes, based on metadata analysis reviewed by Srikanth. The incident adds to growing concern over cybersecurity risks facing large companies and financial institutions that store vast amounts of customer and business data. This follows a string of recent breaches in India. In June, a cyberattack on Apple supplier Tata Electronics led to the leak of component design and specification documents linked to Apple and Tesla. Earlier this month the ransomware group World Leaks posted files related to India's largest nuclear power plant, Kudankulam on the dark web.

Preliminary findings suggest the breach originated from a compromised email system, the source said. The data surfaced on a dark web site on Saturday night, advertised as a cache of over 700 gigabytes, based on metadata analysis reviewed by Srikanth. The incident adds to growing concern over cybersecurity risks facing large companies and financial institutions that store vast amounts of customer and business data. This follows a string of recent breaches in India. In June, a cyberattack on Apple supplier Tata Electronics led to the leak of component design and specification documents linked to Apple and Tesla. Earlier this month the ransomware group World Leaks posted files related to India's largest nuclear power plant, Kudankulam on the dark web.

The incident adds to growing concern over cybersecurity risks facing large companies and financial institutions that store vast amounts of customer and business data. This follows a string of recent breaches in India. In June, a cyberattack on Apple supplier Tata Electronics led to the leak of component design and specification documents linked to Apple and Tesla. Earlier this month the ransomware group World Leaks posted files related to India's largest nuclear power plant, Kudankulam on the dark web.

This follows a string of recent breaches in India. In June, a cyberattack on Apple supplier Tata Electronics led to the leak of component design and specification documents linked to Apple and Tesla. Earlier this month the ransomware group World Leaks posted files related to India's largest nuclear power plant, Kudankulam on the dark web.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Bank of Baroda Faces Alleged 1TB Data Leak on Dark Web Bank of Baroda is reportedly facing a significant cybersecurity incident involving the alleged leak of approximately 1TB of sensitive customer and internal banking data on the dark web. The breach is attributed to the compromise of an employee's email account, leading to unauthorized access to specific data files. The leaked information includes personal details such as Aadhaar numbers, loan records, and internal audit documents. The bank has confirmed that its core banking systems remain secure and that immediate containment measures were implemented. A forensic investigation is underway, and the bank is collaborating with relevant authorities. The incident was first highlighted by cybersecurity researcher Srikanth Lakshmanan, who shared evidence of the leak on social media. Despite the claims, the authenticity of the leaked data has not been independently verified, and regulatory bodies have yet to confirm the breach. 40 sources 65

Extracted Entities

Bank of Baroda Data Breach: Customer Details Leaked on Dark Web

The full story

Extracted Entities

Attack Types (1)

Companies (4)

Countries (1)

Domains (1)

Email Addresses (1)

Industries (1)

Ransomware Groups (1)