BoB’s critical data leaks on dark web, bank initiates probe
Bank of Baroda initiated a forensic investigation after reports alleged a data leak of about one terabyte of critical data, linked to compromise of an employee email account.
- The dark web is not indexed like the open web, so alleged leak claims need forensic checks rather than quick online searches.
- Core banking systems are the systems that run core banking functions like customer accounts and transactions; BoB said those systems stayed secure.
- Employee email compromise can act as an entry point, allowing unauthorised access to certain data even without direct access to core banking systems.
- Forensic investigation supports incident response steps like evidence preservation and verifying what systems and data were reached; banks also coordinate with authorities when required.
What happened (BoB’s reported data leak and response)
Bank of Baroda (BoB) initiated a forensic investigation into a reported data leak involving about 1 terabyte of critical data. BoB stated it is working with relevant authorities in line with regulatory requirements.
BoB addressed online claims that the data might have been posted on the dark web. BoB’s public response also stated that its core banking systems were not accessed and remained secure.
UPSC may frame the issue around how banks should verify breach claims, contain potential intrusion paths, and distinguish between unauthorized access to certain data and access to core banking systems. A strong answer can focus on evidence-based incident response and uncertainty management for customer impact assessment.
Related dispatches
