Bank of Baroda Clarifies Security Incident After Alleged 1TB Data Leak Claims on Dark Web
State-owned Bank of Baroda issued a statement clarifying that a recent security incident involved an employee's email compromise and unauthorised access to specific data files, assuring its core banking systems remain secure. "The Bank's core banking systems were not accessed and continue to remain secure," the statement read.
State-owned lender Bank of Baroda has issued an official statement regarding a recent security incident, confirming that the event involved the compromise of an employee's email account and subsequent unauthorised access to specific data files. The clarification from the financial institution comes in the wake of online claims and reports concerning a potential 1TB data leak across digital channels, prompting heightened scrutiny regarding institutional cybersecurity protocols.
Nature of the Incident
According to the bank's communication, the security event was isolated to an individual employee's email credentials rather than a systemic compromise of the institution's core banking infrastructure. Unauthorised access was gained to certain data contained within that specific account. Bank officials stated that security teams immediately initiated protocols to contain the breach, secure the affected systems, and evaluate the scope of the incident. Bank of Baroda Data Breach Claim: 1TB Leak Allegedly Exposes Customer Account Details and Aadhaar.
Bank of Baroda Issues Official Statement on Alleged Data Leak
— Bank of Baroda (@bankofbaroda) July 27, 2026
In a post on X (formerly Twitter), Bank of Baroda said, "The incident involved compromise of an employee's email account, resulting in unauthorised access to certain data. The matter was promptly identified, and immediate containment measures were implemented. The Bank's core banking systems were not accessed and continue to remain secure." Bank of Baroda added that a "comprehensive forensic investigation" was underway with the bank working closely with the "relevant authorities in accordance with applicable regulatory requirements".
Hacker Allegedly Leaks 1TB Sensitive Data On Dark Web
More sample data. Goes beyond KYC docs. Tonnes of internal audit data available pic.twitter.com/uHa7f4ASqu
— Srikanth.CashlessConsumer | ஸ்ரீகாந்த் (@logic) July 26, 2026
Response and Security Measures
Following the detection of the unauthorised access, Bank of Baroda escalated the matter internally and commenced a comprehensive technical review. The lender assured customers and stakeholders that remedial actions have been deployed to reinforce email security and prevent similar occurrences. Authorities and relevant cybersecurity agencies continue to monitor infrastructure integrity as reviews proceed across affected digital touchpoints. The clarification comes after a threat actor allegedly claimed to have breached the bank's systems and put around 1TB of sensitive data up for free on the dark web. It is reported that the alleged data includes personal and corporate banking details such as Aadhaar numbers, names, and loan records from multiple branches across India.
The claims were first flagged by X user Srikanth Lakshmanan, a software engineer and founder of CashlessConsumer. Srikanth wrote on X, "Root folder of the data dump of @bankofbaroda #Databreach by threat actor. More verification links in the thread. The link is live. This is SOS @Cyberdost @RBI". His post also included screenshots and a link to another X account, Dark Web Intelligence, which claimed a threat actor had published samples of the alleged data along with download links. "India, Threat Actor Claims 1 TB Bank of Baroda Data Leak," the account stated.
(The above story first appeared on LatestLY on Jul 27, 2026 05:19 PM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).
