Bank of Baroda leak exposes Aadhaar, names and account details online

A threat actor has allegedly breached Bank of Baroda's systems and accessed over 1TB of sensitive data. From account details, Aadhaar numbers, and loans, all of this data is now allegedly available on the dark web.A hacker has allegedly put 1TB of sensitive data from Bank of Baroda, including Aadhaar numbers, account details, on the dark web for free. (Photo: Reuters)Bank of Baroda has reportedly been hacked. A threat actor, who claims to have breached the bank’s systems, has allegedly put 1TB of sensitive data on the dark web for free. The data includes personal and corporate banking details, be it Aadhaar numbers, names, and loans from multiple branches across India.The hacker has also shared sample documents from the breach online. Software engineer and founder of CashlessConsumer Srikanth Lakshmanan shared the sample documents on X, stating that the link was live. When asked about the breach, Srikanth told India Today Tech, “It's a cyber disaster.” Srikanth Lakshmanan shared screenshots from the breach on X. At the time of writing, Bank of Baroda has not publicly commented on the allegations. There has been no confirmation from CERT-In or the Reserve Bank of India either.Bank of Baroda breach, data allegedly being soldThe hacker claims to have made available 1TB of sensitive data. This includes savings and current account records, loan data, NetBanking user details, NRI and corporate banking service records, customer support material, and branch or ATM-related records According to Srikanth, the breach was first spotted on Saturday, July 25, by dark web tracking site ransomeware.live.Srikanth stated that the data being put up online for sale includes internal Bank of Baroda documents as well as customer details. “I was able to initially verify the documents and have found a range of internal documents of the bank,” he tells India Today Tech. “This includes branch audits, loan appraisal documents, internal communications, vigilance investigations, bobWorld audit reports, customer data including application forms across multiple BoB branches across the country.” Sample documents put up by the hackers included internal documents from Bank of Baroda. Who is behind Bank of Baroda breach?While no hacker has publicly taken responsibility for this breach. Srikanth believes that a relatively new hacking group called Triplx X may be behind this attack. He explained, “The attacker - TripleX - who was previously involved in an Indonesian bank - has made the entire dataset publicly available on a tor site.”In May this year, TripleX breached one of Indonesia's largest state-owned banks, PT Bank Negara Indonesia. The group managed to steal about 2TB of data, containing contracts, personal identification details, financial transaction histories, and internal banking documents.This attack comes at a time when there is growing fear over cybersecurity threats, particularly in the banking sector. AI models like Claude Mythos had already rung alarm bells globally, with India too asking its financial institutions to implement proper safeguards.While there has not been a recent breach in Bank of Baroda’s internal systems, in September 2025, cybersecurity firm UpGuard stated that an exposed cloud database contained more than 2,73,000 Indian banking records. 6,000 of which were linked to Bank of Baroda. Though this was a third-party system.- EndsPublished By: Armaan AgarwalPublished On: Jul 27, 2026 09:52 IST