Bank of Baroda Data Leak (1 TB): Account Details, Names, Numbers, and Aadhaar Data

Bank of Baroda appears to have suffered a cyberattack. An attacker claiming to have breached the institution's systems has allegedly made 1 TB of sensitive data available for free on the dark web. The information includes personal and corporate banking data, such as Aadhaar numbers, names, and loan details from multiple branches across India.

The attacker also shared sample documents obtained during the security breach online. Srikanth Lakshmanan, a software engineer and founder of CashlessConsumer, shared these samples on X (formerly Twitter) and confirmed that the link was active. When asked about the incident, Srikanth told a famous publication: "It is a cyber disaster."

As of this writing, Bank of Baroda has not made any public comments regarding the allegations. There has also been no confirmation from CERT-In or the Reserve Bank of India.

Bank of Baroda Security Breach: Data Allegedly for Sale

The attacker claims to have made 1 TB of sensitive data available. This includes savings and current account records, loan data, online banking (NetBanking) user information, corporate and Non-Resident Indian (NRI) banking records, customer service material, and records related to branches or ATMs. According to Srikanth, the breach was initially detected on Saturday, July 25, by ‘ransomware.live’, a site specialising in dark web monitoring.

Srikanth noted that the data published online includes both internal Bank of Baroda documents and customer information. "I was able to verify the documents initially and found a variety of the bank's internal files," he told a famous publication. "These include branch audits, loan assessment documents, internal communications, internal control investigations, ‘bobWorld’ audit reports, and customer data—including application forms from multiple bank branches across the country."

Who is behind the Bank of Baroda security breach?

So far, no attacker has publicly claimed responsibility for this breach. Srikanth believes that a relatively new hacker group called TripleX might be behind the attack. He explained: "The attacker—TripleX—who was previously involved in an incident with an Indonesian bank, has made the entire dataset public on a Tor network site."

In May of this year, TripleX breached the security of one of Indonesia's largest state-owned banks, PT Bank Negara Indonesia. The group managed to steal nearly 2 TB of data, including contracts, personally identifiable information, financial transaction histories, and internal banking documents.

This attack comes at a time of growing concern regarding cybersecurity threats, particularly in the banking sector. AI models like Claude Mythos had already raised global alarms, and India had also urged its financial institutions to implement appropriate security measures. While there have been no recent breaches of Bank of Baroda's internal systems, in September 2025, the cybersecurity firm UpGuard reported that an exposed cloud database contained over 273,000 Indian banking records—6,000 of which were linked to Bank of Baroda—although the system involved was managed by a third party.