Bank of Baroda may be experiencing a significant data breach, which has the potential to rank among the largest incidents involving an Indian bank. A hacker has allegedly leaked approximately 1TB of data extracted from the bank’s servers, making it available for download online. At this time, Bank of Baroda has not confirmed the validity of these claims.

The data purportedly includes sensitive customer information, internal documents, and compliance records. The situation has caught the attention of cybersecurity experts, and the implications for customers may be serious if the integrity of the data is verified.

As of now, the Indian Computer Emergency Response Team (CERT-In) and the Reserve Bank of India (RBI) have yet to issue any public statements regarding the alleged breach. The lack of official confirmation has led to uncertainty surrounding the situation.

Contents of Alleged Data Leak

The leaked data reportedly consists of various types of sensitive information that could affect Bank of Baroda customers. According to cybersecurity researcher Srikanth Lakshmanan, who shared samples on X, the data includes customer names, mobile numbers, Aadhaar numbers, and account records related to savings and current accounts.

Additional information claimed to be included in the dump comprises loan-related data, NetBanking user details, and records from non-resident Indian (NRI) and corporate banking segments. Customer support material and documentation related to branches and ATMs have also been implicated in the leak.

Moreover, it has been indicated that internal documents such as audit reports, loan appraisal forms, compliance records, and customer application forms spanning multiple branches are part of the breach. However, so far, there is no indication that passwords, ATM PINs, UPI PINs, or one-time passwords (OTPs) have been compromised.

Potential Risks for Customers

Even without the inclusion of login credentials, the breach poses significant risks for Bank of Baroda customers. Exposed personal information may be exploited by cybercriminals for various malicious activities, with targeted phishing being a major concern.

Criminals armed with customer details could create convincing phishing attempts via SMS, email, or phone calls, impersonating Bank of Baroda. Such scams often seek to elicit sensitive information, including passwords and card details, from unsuspecting individuals.

There is also a heightened risk of identity theft. If Aadhaar details and other personal data are indeed part of the leaked information, fraudsters might misuse them for fraudulent loan applications, fake KYC documentation, or other financial crimes. The potential for scammers to conduct well-informed scam calls is another alarming aspect of this situation.

As it stands, the alleged data leak has yet to be substantiated, and the full scope of the breach remains unverified. Bank of Baroda has not acknowledged any compromise of customer data, and no official statements have been made by CERT-In or the RBI. Customers are advised to remain vigilant and cautious in light of potential phishing attempts arising from the exposure.

Long or Short, get news the way you like. No ads. No redirections. Download Newspin and Stay Alert, The CSR Journal Mobile app, for fast, crisp, clean updates!

App Store –  https://apps.apple.com/in/app/newspin/id6746449540 

Google Play Store – https://play.google.com/store/apps/details?id=com.inventifweb.newspin&pcampaignid=web_share