Bank of Baroda says core systems safe after dark web data leak

Data Leak Confirmed

Bank of Baroda has confirmed a data leak after reports emerged of customer data being posted on the dark web. The public sector lender stated on Monday that its core banking system remains uncompromised.

The breach, which some reports estimate involved up to 1 terabyte of data, came to light after cybersecurity researchers flagged the incident. The bank promptly initiated a forensic investigation.

Compromised Email, Not Core Systems

In a statement, Bank of Baroda clarified that the leak originated from a compromised email account. The bank said this was a limited exposure and did not affect its central banking infrastructure.

"Our core banking system is uncompromised and continues to function securely," a bank spokesperson said. The institution has not confirmed the exact volume of data leaked, but independent researchers have pegged it at around 1 TB.

What Data Was Exposed?

Initial reports suggest the leaked data includes personal details such as names, addresses, and phone numbers of customers. However, the bank has assured that no sensitive financial information, like PINs or passwords, was part of the breach.

The compromised email account apparently held a range of internal communications and customer-related files. The forensic investigation aims to determine the full extent of the exposure and how the email was accessed.

Researcher Findings

Cybersecurity researchers who first identified the leak have described it as a significant data dump on a popular dark web forum. They noted that the data appeared to be recent and contained records from multiple branches.

The bank has not yet identified the individual or group behind the breach. Law enforcement agencies have been notified, and the investigation is ongoing.

Customer Advisory Issued

Bank of Baroda has advised customers to remain cautious and monitor their accounts for any unusual activity. The bank has also urged customers to report any suspicious transactions immediately.

"We are taking all necessary steps to strengthen our systems and prevent such incidents in the future," the bank added. Customers have been told they do not need to change their account numbers or debit cards unless they notice fraudulent activity.

Industry Context

Data breaches in the Indian banking sector have been on the rise, with several institutions facing similar incidents in recent years. The Reserve Bank of India has mandated stricter cybersecurity protocols for all banks.

This incident serves as a reminder of the vulnerabilities in email-based communication systems. Banks are increasingly moving towards encrypted channels for internal data sharing.

The forensic investigation is expected to be completed within a few weeks. The bank will likely provide a detailed report to the RBI on the findings and the steps taken to bolster security.