Bank of Baroda is at the centre of a reported cyber incident after a threat actor claimed to have accessed the bank’s systems and placed 1TB of data on the dark web for free.
The material is said to contain customer and corporate banking information, including Aadhaar numbers, names and loan records drawn from several branches across India.
Go deeper with GlobalData
Access deeper industry intelligence
Experience unmatched clarity with a single platform that combines unique data, AI, and human expertise.
Sample files linked to the alleged breach have also appeared online.
Software engineer and CashlessConsumer founder Srikanth Lakshmanan posted those samples on X and said the link was active.
Speaking to India Today Tech about the incident, he said, “It’s a cyber disaster.”
The threat actor says the exposed dataset contains savings and current account information, loan records, NetBanking user details, NRI and corporate banking service records, customer support material, and records related to branches or ATMs.
Lakshmanan said the issue was first noticed on dark web tracking site ransomeware.live.
He said the information made public appears to include both internal Bank of Baroda records and customer-related material.
“I was able to initially verify the documents and have found a range of internal documents of the bank,” he tells India Today Tech.
“This includes branch audits, loan appraisal documents, internal communications, vigilance investigations, bobWorld audit reports, customer data including application forms across multiple BoB branches across the country.”
No individual or group has publicly claimed responsibility for the incident.
However, Lakshmanan said a newer hacking group known as TripleX could be involved.
He said, “The attacker – TripleX – who was previously involved in an Indonesian bank – has made the entire dataset publicly available on a tor site.”
In May this year, TripleX breached PT Bank Negara Indonesia, one of Indonesia’s largest state-owned banks. In that case, the group took about 2TB of data, including contracts, personal identification details, financial transaction histories and internal banking documents.
