Bank of Baroda hit alleged data breach; hacker claims 1TB customer records leaked
TripleX, a relatively new hacking group, is believed to be behind the attack, per a dark-web monitoring platform Ransomware.live.
Its listing, dated July 24, claims the dataset contains between 100,000 and 300,000 customer forms, including photographs and identity documents submitted while opening bank accounts.
The leaked material allegedly includes Aadhaar details, savings and current account records, loan applications, NetBanking information and documents related to NRI and corporate banking services.
Srikanth Lakshmanan, software engineer and founder of CashlessConsumer, too alerted the attack on X and said he had examined sample files shared by the attacker and found internal documents, branch audits, loan appraisal papers, vigilance investigations, bob World audit reports and customer application forms from branches across India.
“It’s a cyber disaster,” Lakshmanan said.
TripleX had previously claimed responsibility for stealing about 2TB of data from Indonesia’s state-owned Bank Negara Indonesia in May.
Bank of Baroda had not publicly responded to the allegations. Neither the Reserve Bank of India nor the Indian Computer Emergency Response Team, or CERT-In, had confirmed the breach.
