BoB data breach: A look at India's biggest corporate cyberattacks

Bank of Baroda has confirmed a security incident involving the compromise of customer data. The bank stated that due to an employee's lack of digital hygiene, an email account was compromised, leading to the breach. Bank of Baroda said the matter was promptly identified and immediate containment measures were implemented. The bank confirmed its core banking systems were not accessed and remain secure. A comprehensive forensic investigation has been initiated, and the bank is working with relevant authorities. The statement was issued almost three days after the news of the breach broke. Srikanth Lakshmanan, founder of CashlessConsumer, examined the leaked data and said it contained genuine information of Bank of Baroda's customers. He flagged the issue with the Reserve Bank of India, Bank of Baroda, and the IT Ministry on the X platform. Lakshmanan believes the Triple X data extortion and ransomware threat group is behind the breach. The leaked data includes personal and corporate banking records, savings and current account numbers, phone numbers, email details, Aadhaar numbers, loan applications, netbanking user IDs, NRI customer database, corporate banking services, customer support, and ATM-related records. Around 1TB of customer data was reportedly put for sale on the darknet by hackers, as reported by Dark Web Intelligence on the X platform. Bank of Baroda remains committed to maintaining the highest standards of information security and safeguarding customer trust.