Bank of Baroda Data Breach: 1TB of Sensitive Information Allegedly Leaked Online

By: Harsh Vardhan

|

Updated on: 27-Jul-2026 10:01 PM

9,932 views

Follow Us:

9,932 views

​Bank of Baroda has reportedly suffered a major data breach, with a threat actor claiming to have accessed and released 1TB of sensitive information. The data, now allegedly available for free on the dark web, includes personal and corporate banking details such as Aadhaar numbers, names, and loan records from branches across India.

Key Highlights

• Bank of Baroda allegedly breached with 1TB of sensitive data leaked on the dark web.
• Leaked information includes personal, corporate, and internal banking documents from multiple branches.
• Hacking group TripleX suspected, previously linked to a major Indonesian bank breach.

Details of the Alleged Breach

The hacker has shared sample documents from the breach online. Srikanth Lakshmanan, a software engineer and founder of CashlessConsumer, posted these samples on X, confirming that the link to the leaked data was active. He described the situation as a "cyber disaster" and provided screenshots of the compromised documents.

According to sources, Bank of Baroda is conducting an internal investigation to verify the authenticity of the data leak. As of now, the bank has not issued a public statement regarding the incident. There has also been no official confirmation from CERT-In or the Reserve Bank of India.

Scope and Impact of the Leak

The hacker claims the leaked 1TB dataset includes savings and current account records, loan data, NetBanking user information, NRI and corporate banking service records, customer support materials, and records related to branches and ATMs. Srikanth Lakshmanan stated that the breach was first detected on Saturday, July 25, by the dark web tracking site ransomeware.live.

He confirmed that the exposed data contains both internal Bank of Baroda documents and customer details. The files reportedly include branch audits, loan appraisal documents, internal communications, vigilance investigations, bobWorld audit reports, and customer application forms from multiple branches nationwide.

Possible Source and Previous Incidents

No individual or group has officially claimed responsibility for the breach. However, Srikanth suspects that a relatively new hacking group called TripleX may be involved. He noted that TripleX previously targeted PT Bank Negara Indonesia in May, stealing about 2TB of data, including contracts, personal identification details, financial transaction histories, and internal documents. The attacker has now reportedly made the Bank of Baroda dataset publicly available on a Tor site.

This breach comes amid rising concerns over cybersecurity threats in the banking sector. AI models such as Claude Mythos have highlighted global risks, prompting Indian authorities to urge financial institutions to strengthen their security measures.

Related Security Incidents

Although Bank of Baroda has not experienced a recent internal system breach, a September 2025 report from cybersecurity firm UpGuard revealed that an exposed cloud database contained over 273,000 Indian banking records. Of these, 6,000 were linked to Bank of Baroda, though the exposure was through a third-party system.

Other recent security concerns include vulnerabilities in the UMANG portal, which may have exposed Aadhaar-linked data of millions, and warnings from Finance Minister Nirmala Sitharaman regarding bank security risks associated with Anthropic Mythos AI. Additionally, IT experts have raised alarms about the security of the CBSE website amid a marking portal controversy.