Bank of Baroda data leak: Forensic probe launched, core systems secure
Synopsis
A hacker allegedly put 1 TB of Bank of Baroda customer data on the dark web — savings accounts, loans, NRI records and more. BoB says core systems are untouched and a forensic probe is underway, but the entry point was an employee's compromised email, raising hard questions about insider endpoint security at one of India's largest public sector banks.
Key Takeaways
Bank of Baroda confirmed on 27 July that a forensic investigation has been launched following reports of a major data leak.
The breach reportedly originated from the compromise of an employee's email account , not the core banking system.
Media reports alleged a hacker possesses approximately 1 TB of sensitive data, including savings, loan, NRI, and corporate banking records.
BoB stated its core banking systems were not accessed and remain fully secure.
The bank is cooperating with relevant authorities under applicable regulatory requirements; agencies have not been publicly named.
Customers are advised to monitor accounts and update internet banking credentials as a precaution.
Bank of Baroda (BoB), the state-owned lender, on Monday, 27 July confirmed it has launched a comprehensive forensic investigation after reports emerged that nearly 1 terabyte of sensitive customer data had surfaced on the dark web. The bank, however, maintained that its core banking systems were not compromised and continue to function securely.
What Happened
According to the bank, the breach originated from the compromise of an employee's email account, which resulted in unauthorised access to certain data. The incident was detected promptly, and containment measures were put in place immediately after discovery.
'The bank has robust information security protocols in place. The incident involved compromise of an employee's email account, resulting in unauthorised access to certain data,' Bank of Baroda said in an official statement.
The bank added: 'The Bank's core banking systems were not accessed and continue to remain secure.'
Scale of the Alleged Breach
Media reports had claimed that a hacker allegedly possesses around 1 TB of sensitive Bank of Baroda data, purportedly including records of savings and current accounts, loan-related information, internet banking user details, NRI and corporate banking records, customer support data, and information linked to bank branches and ATMs. The reports further alleged that both personal and corporate banking customers may be affected. NationPress could not independently verify these claims.
Bank's Response and Regulatory Steps
Bank of Baroda stated in a post on social media platform X that a forensic investigation has been initiated to determine the full scope and nature of the incident. The bank said it is cooperating closely with relevant authorities in line with applicable regulatory requirements, without specifying which agencies are involved.
'A comprehensive forensic investigation has been initiated, and the Bank is working closely with the relevant authorities in accordance with applicable regulatory requirements,' the lender stated.
What the Bank Has Assured Customers
The bank sought to reassure its customers and stakeholders, affirming its commitment to maintaining the highest standards of information security. 'The Bank remains committed to maintaining the highest standards of information security and to safeguarding the trust of its customers and stakeholders,' BoB added.
This comes amid a broader pattern of rising cyber threats targeting Indian financial institutions. Notably, this is not the first time a public sector bank has faced scrutiny over data security — regulators including the Reserve Bank of India (RBI) have in recent years tightened cybersecurity guidelines for banks, mandating faster breach disclosures and stronger endpoint controls.
What Happens Next
The forensic investigation's findings will likely determine the regulatory and legal steps that follow. If the breach is confirmed to have exposed customer data at scale, Bank of Baroda could face scrutiny from the RBI and potentially the Indian Computer Emergency Response Team (CERT-In), which mandates breach reporting within six hours. Customers with accounts at the bank are advised to monitor their accounts for unusual activity and change internet banking credentials as a precaution.
Point of View
Access controls, and the principle of least privilege — areas where Indian public sector banks have historically lagged private peers. The RBI's tightened cybersecurity framework demands breach disclosure within hours, yet the bank's statement is notably vague on when regulators were formally notified. If the dark web claims are verified, the reputational and regulatory cost will far exceed the technical fix.
NationPress
27 Jul 2026
Frequently Asked Questions
What happened in the Bank of Baroda data leak?
Reports emerged that approximately 1 TB of sensitive Bank of Baroda customer data, including savings account records, loan details, NRI banking data, and internet banking credentials, allegedly appeared on the dark web. The bank confirmed the breach originated from a compromised employee email account, not its core banking systems.
Are Bank of Baroda core banking systems affected?
No, according to the bank. Bank of Baroda explicitly stated that its core banking systems were not accessed and continue to remain secure. The unauthorised access was limited to data reachable through a compromised employee email account.
What data was allegedly leaked from Bank of Baroda?
According to media reports, the allegedly leaked data includes savings and current account records, loan-related information, internet banking user details, NRI and corporate banking records, customer support data, and branch and ATM information. NationPress could not independently verify these claims.
What action is Bank of Baroda taking after the breach?
Bank of Baroda has initiated a comprehensive forensic investigation to determine the scope and nature of the incident. The bank is also working with relevant authorities in accordance with regulatory requirements, though it has not publicly named the agencies involved.
What should Bank of Baroda customers do now?
Customers are advised to monitor their accounts closely for any unusual transactions and to change their internet banking passwords and PINs as a precautionary measure. Any suspicious activity should be reported to the bank's customer support immediately.
