A major cyberattack has reportedly targeted the cyber systems of Bank of Baroda (BoB). According to reports, hackers allegedly breached the bank’s systems and made nearly 1TB of highly sensitive data available for free on the dark web. The leaked information is said to include customers’ personal and corporate banking records, such as names, loan details, savings and current account information, and Aadhaar-related data.
One of India’s leading public sector banks, Bank of Baroda (BoB), has become the subject of alarming reports after a hacker claimed to have breached the bank’s systems and leaked highly sensitive data belonging to millions of customers. The alleged attacker claims to have uploaded approximately 1TB of sensitive data to the dark web at no cost. The dataset reportedly contains personal and corporate banking information, including Aadhaar numbers, customer names, and loan details from multiple Bank of Baroda branches across India. To support the claim, the hacker has also shared a number of allegedly stolen documents online.
Software engineer and CashlessConsumer founder Srikanth Lakshmanan shared sample documents on X, stating that the link was active. According to an India Today report, when asked about the incident, he described it as a ‘cyber disaster.’
1TB Data Leak
As of now, neither Bank of Baroda nor CERT-In or the Reserve Bank of India (RBI) has officially confirmed the alleged breach. The hacker claims the leaked 1TB dataset includes savings and current account records, loan information, internet banking user details, NRI and corporate banking records, customer support information, and branch and ATM-related records. According to Srikanth, the leak was first identified on Saturday, July 25, by the dark web monitoring website ‘ransomeware.live’.
Sensitive Information Allegedly Exposed
Srikanth said the leaked data appears to include internal Bank of Baroda documents as well as customer information. According to India Today Tech, his preliminary review found numerous internal documents, including branch audit reports, loan appraisal documents, internal communications, vigilance investigation files, bobWorld audit reports, and customer data from multiple Bank of Baroda branches across the country.
TripleX Hacking Group Suspected
Srikanth believes that a relatively new hacking group known as ‘TripleX’ may be responsible for the attack. He stated that the attackers published the entire dataset on a public Tor website. The same group has also reportedly been linked to a cyberattack on a bank in Indonesia.
The alleged attack comes at a time when concerns over cybersecurity threats—particularly in the banking sector—are growing. AI models such as Claude Mythos have already raised global concerns about evolving cyber risks, and Indian authorities have urged financial institutions to implement stronger security measures.
Although there have been no confirmed reports of a recent breach of Bank of Baroda’s internal systems, cybersecurity firm UpGuard reported in September 2025 that an exposed cloud database contained more than 273,000 Indian banking records, including around 6,000 records related to Bank of Baroda. That incident, however, involved a third-party system rather than the bank’s internal infrastructure.
About the Author
