Threat actor claims to possess 1 TB of Bank of Baroda data; bank yet to respond

A threat actor has claimed to possess approximately 1 terabyte of data linked to Bank of Baroda, according to posts by cyber threat intelligence accounts and independent cybersecurity researchers. The claim has not been independently verified. Bank of Baroda, however, stated the incident resulted from the compromise of an employee's email account and that its core banking systems were not accessed.

The alleged data leak was first flagged on social media, where it was claimed that the threat actor had published sample files and download links while asserting possession of around 1 TB of data associated with the bank. According to these posts, the alleged dataset includes personal (ekyc) and corporate banking records related to savings and current accounts, loans, net banking users, NRI and corporate banking services, customer support, as well as branch and ATM operations.

The posts further alleged that the sample files contained customer forms featuring identity, and account-related information. However, the source of the data, the method by which it was allegedly obtained, and the authenticity of the files could not be independently verified.

In a statement, Bank of Baroda said the incident involved the compromise of an employee's email account, resulting in unauthorised access to certain data. The Bank said the issue was promptly identified and containment measures were implemented. It added that its core banking systems were not accessed and continue to remain secure. Bank of Baroda also stated that a forensic investigation has been initiated and that it is working with the relevant authorities in accordance with applicable regulatory requirements.

Published on July 27, 2026