A cybersecurity researcher and a source said customer data linked to Bank of Baroda was exposed online, raising fresh security concerns.
State-owned Bank of Baroda has launched a forensic investigation after customer data and internal documents were reportedly exposed online following a cybersecurity breach involving a compromised employee email account.
The bank said it had implemented initial containment measures and was working with the relevant authorities to investigate the incident.
Bank Confirms Unauthorised Access
In a statement, Bank of Baroda said the breach resulted from a compromised employee email account that led to unauthorised access to certain data.
The lender added that its core banking systems were not accessed and continue to remain secure.
The bank has not disclosed how many customers may have been affected.
What Data Was Reportedly Exposed?
According to cybersecurity researcher Srikanth L, founder of Cashless Consumer, the leaked information allegedly includes:
- Customer details.
- Identification documents.
- Loan-related records.
- Internal audit documents.
Reuters reported that the data appeared on a dark web forum on Saturday night, where it was advertised as containing more than 700GB of information, based on metadata analysis.
The authenticity and full extent of the leaked data have not been independently verified.
Investigation Underway
Bank of Baroda said it has begun a forensic investigation to determine the scope of the incident and is coordinating with the relevant authorities.
The Reserve Bank of India (RBI) and the Indian Computer Emergency Response Team (CERT-In) had not commented on the reported breach at the time of publication.
Cybersecurity Risks Continue to Grow
The incident adds to a series of recent cybersecurity concerns involving major Indian organisations.
In June, a cyberattack on Tata Electronics, a supplier to Apple, reportedly led to the exposure of component design and specification documents linked to Apple and Tesla.
Earlier this month, ransomware group World Leaks also claimed to have published files related to India’s largest nuclear power plant.
The reported Bank of Baroda incident highlights the increasing cybersecurity challenges facing financial institutions, which store large volumes of sensitive customer and business data.
Read more news and follow us on Instagram
The logo of Bank of Baroda is seen on a stand outside their branch office in New Delhi, India, June 20, 2023. REUTERS/Anushree Fadnavis/File Photo Purchase Licensing Rights
Source: Reuters
