Over 700GB of customer records and internal documents from India’s second-largest state-run bank surfaced online amid rising cybersecurity concerns.
Customer data and internal documents from Bank of Baroda have been leaked on the dark web, according to a cybersecurity researcher and a source familiar with the matter. The leaked cache includes identification documents, loan papers, and audit records, with metadata indicating over 700GB of information was exposed. The bank is conducting a forensic audit but has not disclosed the breach to stock exchanges or regulators yet.
The incident follows a pattern of recent cyberattacks targeting Indian financial institutions and suppliers, including a June breach at Tata Electronics that exposed Apple and Tesla-related documents. Preliminary findings suggest the leak originated from a compromised email system, though the exact number of affected customers remains unclear.
Bank of Baroda, the Reserve Bank of India, and CERT-In have not commented on the breach. The data was advertised on a dark web site Saturday night, raising concerns about the security of sensitive financial information held by large institutions.