The bank has launched a forensic investigation into the claim, though it has not confirmed that any customer data was actually compromised. Neither the Reserve Bank of India nor CERT-In has issued an official statement either, leaving the scale of the incident genuinely uncertain for now. What is not uncertain is how alarming the alleged contents look. According to researchers who reviewed sample files, the leaked material appears to span savings and current account records, Aadhaar numbers, loan documents, NetBanking details, NRI and corporate banking information, and internal files including branch audits and vigilance reports.
Software engineer Srikanth Lakshmanan, founder of CashlessConsumer, examined some of the shared samples himself and called the situation a cyber disaster, noting that the download link appeared to be live and that several documents looked authentic, including loan appraisal files and customer application forms from multiple branches across the country.
No group has formally claimed responsibility, but Lakshmanan pointed to a relatively new hacking outfit called TripleX as a possible suspect, citing similarities to an earlier breach it carried out in May against PT Bank Negara Indonesia, where roughly 2TB of banking data was taken. This is not the first time Bank of Baroda's name has surfaced in a data exposure either, a third-party cloud database leak last September reportedly touched around 6,000 records tied to the bank.
Until Bank of Baroda confirms one way or the other, customers are left not knowing whether their information is actually out there, with the only real advice being the usual one: watch for phishing attempts and stay cautious with anything claiming to come from the bank.
Filed by
Startup Unplugged
