Bank of Baroda has confirmed a cybersecurity incident. The bank said the compromise was limited to an employee’s email account and that its core banking systems remain secure and uncompromised.
Reuters reported that customer data from India’s state-run lender, along with internal documents, was posted online after a threat actor claimed responsibility for the leak. Other reports said the exposed material may total nearly 1 TB and could include Aadhaar details, account records, loan papers, NetBanking information, branch documents, and other sensitive files.
In its statement, Bank of Baroda said the incident was identified promptly and that necessary action had been initiated. The bank added that a forensic review has been launched to determine the extent of the exposure and to verify the claims circulating online.
The alleged breach has raised concerns because even if core banking infrastructure was not affected, exposed email content and internal documents can still be used for phishing, impersonation, and targeted fraud. Security experts say such leaks can increase risk for both customers and employees if criminals use the information to build convincing social-engineering campaigns.
Reports on the scale of the leak vary, with some describing around 700 GB of data and others citing nearly 1 TB. As of now, the authenticity of the full dataset has not been independently verified, but the incident has already prompted scrutiny across the banking and cybersecurity sectors.
