Bank of Baroda is investigating claims of a major cybersecurity breach after a threat actor allegedly released nearly 1TB of sensitive data on the dark web. The leaked information is said to include customer and corporate banking records, Aadhaar numbers, account details, loan information and internal bank documents.
The public sector lender has not yet confirmed the authenticity of the leaked data. The Reserve Bank of India (RBI) and the Indian Computer Emergency Response Team (CERT-In) have also not issued any official statement on the incident.
Customer, Banking Records Allegedly Exposed
According to cybersecurity reports, the alleged data dump contains savings and current account records, loan documents, NetBanking user information, NRI and corporate banking data, customer support records, and branch and ATM-related documents.
Experts who examined sample files shared online said they appear to contain internal bank records along with customer-related information from multiple branches across the country.
The leaked documents reportedly include branch audit reports, loan appraisal files, internal communications, vigilance records, bobWorld audit reports and customer application forms.
TripleX Hacking Group Suspected
Cybersecurity researcher Srikanth Lakshmanan described the alleged breach as a serious security concern.
According to him, the incident was first detected on July 25 through a dark web monitoring platform. He claimed that a relatively new hacking group known as TripleX may be responsible for the attack.
The same group has also been linked to an alleged cyberattack on Indonesia’s state-owned PT Bank Negara Indonesia, where nearly 2TB of data was reportedly stolen earlier this year.
Investigation Underway
The reported breach comes amid growing concerns over cyberattacks targeting financial institutions.
While Bank of Baroda has not reported any recent confirmed compromise of its internal systems, cybersecurity firm UpGuard had reported in September 2025 that a third-party cloud database exposed more than 273,000 Indian banking records, including around 6,000 records linked to Bank of Baroda.
The authenticity, source and scale of the latest alleged data leak are still being verified. Bank of Baroda is yet to confirm whether customer information has been compromised, while customers await an official update on the matter.