 |
| A Bank of Baroda branch as the lender investigates a cybersecurity incident involving unauthorized access to customer data. |
Bank of Baroda Investigates Customer Data Leak After Cybersecurity Breach
MUMBAI — July 27, 2026
India's state-owned Bank of Baroda has launched a forensic investigation after customer data and internal documents were reportedly leaked on the dark web following a cybersecurity breach involving a compromised employee email account.
The bank said it has implemented initial containment measures and is working with relevant authorities to investigate the incident. It added that unauthorized access was limited to certain data and did not affect its core banking systems.
According to the bank, the breach occurred after an employee's email account was compromised, allowing unauthorized access to some information. The lender emphasized that its core banking infrastructure remains secure and continues to operate normally.
A cybersecurity researcher said the leaked files appear to include customer information, identity documents, loan-related records and internal audit documents. The data reportedly surfaced on a dark web website on Saturday and was advertised as containing more than 700 gigabytes of information based on metadata analysis.
The number of customers affected has not yet been confirmed.
India's central bank, the Reserve Bank of India, and the country's cybersecurity response agency, CERT-In, did not immediately comment on the reported breach.
The incident highlights growing cybersecurity risks facing banks and other organizations that manage large volumes of sensitive customer information. Financial institutions have increasingly strengthened digital security measures as cyberattacks become more frequent and sophisticated.
The reported breach follows several high-profile cybersecurity incidents involving major Indian companies. In June, a cyberattack on Tata Electronics reportedly exposed design and specification documents linked to Apple and Tesla. Earlier this month, the ransomware group World Leaks claimed responsibility for publishing files related to India's largest nuclear power plant.
Authorities and the bank's investigators are expected to determine the full scope of the breach, how the unauthorized access occurred and whether additional security measures are required.
