BoB’s critical data leaks on dark web, bank initiates probe

What happened (BoB’s reported data leak and response)

Bank of Baroda (BoB) initiated a forensic investigation into a reported data leak involving about 1 terabyte of critical data. BoB stated it is working with relevant authorities in line with regulatory requirements.

BoB addressed online claims that the data might have been posted on the dark web. BoB’s public response also stated that its core banking systems were not accessed and remained secure.

BoB attributed the incident to compromise of an employee email account, leading to unauthorised access to certain data. BoB said it implemented prompt containment measures after the unauthorised access.

BoB said it was unclear how many customers were affected at the time of the reported development, linking the incident to broader cybersecurity risk for large companies and financial institutions storing extensive customer and business data.

Background and earlier position (entry points and risk in banking)