Bank of Baroda Investigates Massive 700GB Customer Data Breach Following Dark Web Leak

India’s state-run Bank of Baroda is currently investigating a significant cybersecurity crisis after more than 700 gigabytes of sensitive customer data were discovered leaked on the dark web. The breach, which was initially flagged by a cybersecurity researcher, has prompted an immediate internal probe by the financial institution. The incident highlights the persistent vulnerabilities within large-scale financial infrastructure, particularly regarding the protection of digitized customer records and internal documentation in an increasingly hostile global cyber landscape.

Preliminary reports indicate that the unauthorized access was facilitated through a compromised employee email account. This single point of failure allowed attackers to harvest a massive trove of data, including personal identification documents, detailed loan applications, and sensitive internal audit records. The scale of the leak—exceeding 700 gigabytes—suggests a comprehensive extraction of administrative and customer files, potentially exposing thousands of individuals to risks of identity theft and targeted fraudulent activities.

Despite the severity of the data exposure, Bank of Baroda has issued a statement assuring the public and its stakeholders that its core banking systems remain secure. The bank clarified that while document repositories and internal reports were accessed, the primary platforms used for transaction processing and account balance management were not compromised. Security teams are currently focused on containing the breach and assessing the full extent of the information that was exfiltrated from the compromised account.

As of now, major regulatory and security bodies, including the Reserve Bank of India (RBI) and the Indian Computer Emergency Response Team (CERT-In), have not yet issued official comments on the matter. The incident serves as a critical case study on the importance of securing internal communication channels and implementing robust multi-factor authentication. For Bank of Baroda, the immediate priority remains reinforcing its digital perimeter and restoring customer confidence following this significant exposure of private documentation.