A hacker has claimed to have stolen and leaked nearly 1TB of Bank of Baroda data on the dark web, allegedly exposing customer records, Aadhaar details, loan documents and internal banking files. The bank has not yet commented on the claims.
BY PC Bureau
New Delhi/ July 27: A hacker has claimed responsibility for what could be one of the largest alleged cyber breaches involving an Indian public sector bank, asserting that nearly 1TB of confidential Bank of Baroda data has been stolen and uploaded to the dark web.
The alleged leak is said to include a vast collection of customer information, internal banking documents and corporate records, with sample files reportedly released online to support the claim. The exposed data is believed to contain Aadhaar details, customer names, loan documents, account-related records and internal communications spanning multiple Bank of Baroda branches across the country.
Cybersecurity researcher and CashlessConsumer founder Srikanth Lakshmanan termed the alleged breach a “cyber disaster”. Sharing screenshots of the purported leaked documents on social media platform X, he said the download link was active when he verified it.
According to Lakshmanan, the breach was first flagged on July 25 by dark web monitoring platform Ransomware.live.
Root folder of the data dump of @bankofbaroda #Databreach by threat actor. More verification links in the thread. The link is live.
This is SOS @Cyberdost @RBI
cc @latha_venkatesh @dugalira @nit_set @suchetadalal https://t.co/6HZ2c6V6S5 pic.twitter.com/tWFCKJWv8Q
— Srikanth.CashlessConsumer | ஸ்ரீகாந்த் (@logic) July 26, 2026
He said his preliminary examination indicated that the leaked archive contained a broad range of sensitive material, including savings and current account records, loan appraisal documents, NetBanking user information, NRI and corporate banking records, customer support files, branch audits, vigilance investigation reports, bobWorld audit reports and internal communications.
Lakshmanan added that customer application forms and other documents from branches across India also appeared to be part of the leaked dataset, although a detailed forensic verification is still awaited.
While no cybercriminal group has officially claimed responsibility, Lakshmanan suspects the attack may have been carried out by TripleX, a relatively new hacking group that previously targeted Indonesia’s state-owned PT Bank Negara Indonesia, allegedly stealing around 2TB of financial and customer data earlier this year.
This is the quality of bank branch audit @bankofbaroda – “Delete which is not applicable”. No one ever reads these. Is this even a bank? @RBI – How long you can continue your incompetent willfull ignorance of regulatory omissions in AI-Cyber era? pic.twitter.com/OYfgBbg9xJ
— Srikanth.CashlessConsumer | ஸ்ரீகாந்த் (@logic) July 26, 2026
READ: 19-Year-Old NEET Aspirant Dies by Suicide in Maharashtra
Bank of Baroda has not yet issued an official statement on the alleged breach. Neither the Indian Computer Emergency Response Team (CERT-In) nor the Reserve Bank of India (RBI) has publicly confirmed the authenticity of the claims.
If verified, the incident would represent one of the most significant alleged data breaches involving an Indian banking institution, raising fresh concerns over cybersecurity preparedness in the country’s financial sector.
READ: 19-Year-Old NEET Aspirant Dies by Suicide in Maharashtra
The alleged breach comes amid increasing cyber threats targeting banks worldwide. Security experts have repeatedly warned that financially motivated hacking groups are becoming more sophisticated, using advanced techniques to compromise sensitive systems and exfiltrate customer data.
In September 2025, cybersecurity firm UpGuard had reported that an exposed third-party cloud database contained more than 273,000 Indian banking records, including about 6,000 linked to Bank of Baroda. That incident, however, was attributed to a third-party system and did not involve the bank’s internal infrastructure.
🇮🇳 India — Threat Actor Claims 1 TB Bank of Baroda Data Leak
A threat actor has published samples and download links while claiming to possess approximately 1 TB of data associated with Bank of Baroda.
* The alleged leak includes personal and corporate banking records.
* The… pic.twitter.com/m1iCbmIPjy— Dark Web Intelligence (@DailyDarkWeb) July 25, 2026
