Bank of Baroda (BoB), India’s largest state-owned lender, has confirmed a cybersecurity incident following weeks of speculation over a massive data leak on dark web forums. The bank issued an official statement on July 27, 2026, acknowledging that an employee's email account had been compromised, resulting in unauthorized access to "certain data." BoB stated it maintains robust information security protocols and that the incident stemmed from a single compromised employee email rather than broader infrastructure failures.
According to PBS and cybersecurity researcher Srikanth L of Cashless Consumer, a leaked dataset reportedly includes customer details, identification documents, loan papers, internal audit records, and social media posts.
Indian media reports indicated the samples contained customer names, photographs, Aadhaar numbers, account-opening forms, and account information, as well as broader datasets spanning savings and current accounts, net banking users, NRI customers, corporate banking clients, and branch/ATM data. The Times of India cites people familiar with the situation, who state that Bank of Baroda has submitted a preliminary notice of loss under its cyber insurance program managed by National Insurance, which provides approximately INR 750 crore (USD 78 million) in coverage. By leveraging ANY.RUN’s SOC capabilities, organizations can better identify and mitigate blind spots, preventing threats from escalating and minimizing response costs and business disruptions.
