A threat actor has claimed to possess approximately 1 terabyte of data linked to Bank of Baroda, according to posts by cyber threat intelligence accounts and independent cybersecurity researchers. The claim has not been independently verified. Bank of Baroda, however, stated the incident resulted from the compromise of an employee's email account and that its core banking systems were not accessed.

The alleged data leak was first flagged on social media, where it was claimed that the threat actor had published sample files and download links while asserting possession of around 1 TB of data associated with the bank. According to these posts, the alleged dataset includes personal (ekyc) and corporate banking records related to savings and current accounts, loans, net banking users, NRI and corporate banking services, customer support, as well as branch and ATM operations.

The posts further alleged that the sample files contained customer forms featuring identity, contact and account-related information. However, the source of the data, the method by which it was allegedly obtained, and the authenticity of the files could not be independently verified.

In a statement, Bank of Baroda said the incident involved the compromise of an employee's email account, resulting in unauthorised access to certain data. The Bank said the issue was promptly identified and containment measures were implemented. It added that its core banking systems were not accessed and continue to remain secure. Bank of Baroda also stated that a forensic investigation has been initiated and that it is working with the relevant authorities in accordance with applicable regulatory requirements.

Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of TheHindu Businessline and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.

Terms & conditions | Institutional Subscriber