Customer data from Bank of Baroda leaked online

​Customer data from state-run Bank of Baroda, ‌along with internal documents, has been leaked on ​the dark web, according to ⁠a source familiar with the matter and a cybersecurity researcher.

The lender said in a statement on ‌Monday that it had started a forensic investigation and was working with ‌relevant authorities after initial containment measures were ‌implemented.

The ⁠breach involved a compromised employee email ⁠account, which resulted in “unauthorised access to certain data”, the Mumbai-based bank said.

“The bank’s core banking systems were not accessed ​and continue to remain ‌secure,” it added.

The leaked data includes customer details, identification documents, loan papers and internal audit records, said cybersecurity researcher Srikanth L, ‌founder of Cashless Consumer.

The Reserve Bank of India and India’s cybersecurity regulator ⁠CERT-In did not immediately respond to requests for comment.

The leak comes amid growing concerns ‌over cybersecurity risks facing large companies and financial institutions that store vast amounts of customer and business data.

The data appeared on a dark web site on Saturday night and was advertised as a cache containing more ‌than 700 gigabytes of information, based on metadata analysis ​of the site, Srikanth said.

In June, a cyberattack on Apple supplier Tata Electronics led ⁠to component design and specification documents linked ⁠to Apple and Tesla being leaked on the dark web.

Earlier this month, ransomware ‌group World Leaks posted files on the dark web related to India’s largest ​nuclear plant.

Comments have to be in English, and in full sentences. They cannot be abusive or personal. Please abide by our community guidelines for posting your comments.

We have migrated to a new commenting platform. If you are already a registered user of TheHindu Businessline and logged in, you may continue to engage with our articles. If you do not have an account please register and login to post comments. Users can access their older comments by logging into their accounts on Vuukle.