A major cybersecurity scare has emerged with reports that Bank of Baroda (BoB) might have suffered a massive data breach, with nearly 1TB of sensitive customer information allegedly being offered online.
The leaked data are said to contain customer names, Aadhaar numbers, account information, loan documents, etc., and so people are worried about the security of personal financial data.
According to the media reports, cybersecurity researchers discovered a threat actor who is claiming to possess the stolen database and sell it on the dark web. The alleged dataset contains customer and internal banking records collected from different Bank of Baroda branches across India.
A cybersecurity researcher named Srikanth Lakshmanan said that the sample files shared by the attacker seemed to contain customer application forms, loan processing documents, internal communications, branch audit reports, vigilance records, and files associated with the bank's digital banking platform. He said that the incident was a serious cybersecurity issue.
The leak is believed to include savings and current accounts, internet banking records, NRI banking services, corporate banking data, ATM-related documents, and customer support records.
However, it is not clear how many customers could have been affected.
Bank of Baroda has not officially confirmed the alleged breach. Likewise, RBI and CERT-In have not provided any public statement on the authenticity or scale of the leak. It will be the responsibility of authorities to verify whether customer data has been compromised.
Even if there is no clear and complete investigation, cybersecurity experts recommend that the public remain vigilant. Users must be aware of their bank accounts, enable SMS and email transaction alerts, avoid clicks on suspicious links or messages, change their internet banking password if need be, and report any unauthorized transactions to the bank immediately.
The incident serves as yet another illustration that the cyber threats against financial institutions in their digital business are growing exponentially.
Banks should enhance their cybersecurity systems, conduct regular security inspections, and track customer information to secure data from evolving cyber threats, those experts say.
Until a formal statement is issued, the reported incident would be interpreted as an alleged data breach rather than a confirmed breach of all customer records.
We expect more clarity when the bank and the investigating agencies have their evaluation and report.
