Customer data from India's Bank of Baroda leaked online, source and researcher say

Customer data and internal documents from India's state-run Bank of Baroda have allegedly been leaked onto the dark web, according to cybersecurity researcher Srikanth L and a source close to the situation. The leaked information reportedly includes customer details, identification documents, loan agreements, and internal audit records.

Srikanth L, founder of Cashless Consumer, stated that metadata analysis of the dark web site indicated the cache contained over 700 gigabytes of data. A source familiar with the matter confirmed the leak and revealed that the bank has initiated a forensic audit to investigate the breach. The exact number of affected customers remains unclear, and Bank of Baroda has not yet notified stock exchanges about the incident.

This data breach occurs amidst rising concerns about cybersecurity vulnerabilities in large corporations and financial institutions that handle substantial amounts of sensitive customer and business information. Preliminary findings suggest that a compromised email system might be the source of the incident.

Bank of Baroda, the Reserve Bank of India, and India's national cybersecurity agency, CERT-In, have not yet responded to requests for comment. This incident follows other recent cyberattacks, including a breach at Tata Electronics that exposed design documents linked to Apple and Tesla, and a ransomware attack on India's largest nuclear plant.