Bank of Baroda Investigates Data Leak on Dark Web
Bank of Baroda has launched a forensic investigation after customer data and internal documents appeared on the dark web. The bank confirmed the data breach on July 27, 2026.
State-run lender Bank of Baroda has initiated a forensic probe following the discovery of its customer data and internal documents on the dark web. The bank confirmed on July 27, 2026, that unauthorized access had occurred, but stated its core banking systems remain secure.
Preliminary findings suggest a compromised email system as the likely source of the breach. The bank has implemented containment measures and is cooperating with authorities. The leaked data is reported to exceed 700 gigabytes and includes customer identification, loan appraisal documents, internal audit reports, and communications.
Cybersecurity experts are advising Bank of Baroda customers to assume their personal data has been compromised. Recommendations include enabling transaction alerts, changing online banking passwords, activating two-factor authentication, and reviewing recent account activity. Potential risks flagged are phishing scams, SIM-swap attacks, and fraudulent loan applications using leaked KYC data.
The incident raises concerns about data protection practices within financial institutions. India has seen other significant data breaches recently, affecting technology firms and critical infrastructure.