BoB confirms data breach,says Core Banking System secure

Customer data from state-run Bank of Baroda (BOB), ​along with internal documents, has been leaked on the ‌dark web, according to a source familiar with the matter and a cybersecurity researcher. The lender said in a statement on Monday that it had ​started a forensic investigation and was working with relevant ​authorities after initial containment measures were implemented. The breach involved ⁠a compromised employee email account, which resulted in "unauthorised access to ​certain data", the bank said in Mumbai.
The Bank issued its first official statement after a hacker claimed to have leaked around 1TB of data allegedly linked to the bank, including customer records and internal documents. The bank said the incident was caused by the compromise of an employee's email account, which resulted in unauthorised access to certain data. It added that its core banking systems were not accessed and remain secure. The bank revealed that the compromised email account resulted in unauthorised access to certain data. However, it added that the incident was identified promptly and immediate containment measures were put in place.
The leaked data includes customer details, identification documents, loan papers and internal audit records, said cybersecurity ​researcher Srikanth L, founder of Cashless Consumer. It was not immediately ​clear how many customers were affected.