Bank of Baroda has said an employee’s email account was compromised, leading to suspected unauthorised access to certain data, and that its core banking systems were not accessed.
A group called TripleX claimed to have leaked 1TB of customer and banking data, with a listing appearing on July 24, 2026, The Week reported. The 1TB size and the group’s other claims are its own, and the bank has not confirmed them. Details are based on The Week and Moneylife.
Confirmed and claimed
| Item | Status |
|---|---|
| Employee email compromised | Confirmed by the bank |
| Suspected unauthorised data access | Confirmed by the bank |
| Core banking accessed | Bank says no |
| 1TB of data leaked | Claimed by TripleX |
| 1 to 3 lakh application forms | Claimed by TripleX |
| Aadhaar and account details exposed | Reported, not confirmed by the bank |
What the bank said
Bank of Baroda said the matter was promptly identified and contained, that a forensic investigation has begun, and that it is working with authorities. We found no later update from the bank beyond its statement of late July.
The claimed data, if genuine, would include photographs and identity documents submitted when opening an account. That kind of data can be misused in scams.
It is one of several data incidents reported in India this year, alongside the Tata Electronics breach and Kudankulam-linked files leaked from a Reliance Group server. The RBI has said it is prepared for AI-linked cyber risks.
What customers and shops should do
Bank of Baroda customers should watch their statements, be wary of callers who quote personal details, and never share an OTP or PIN. Scammers may mention this incident to sound believable. Shops should stick to proper KYC for SIM sales, as leaked identity documents can be used to try to get a connection in someone else’s name. Report any fraud to 1930.
Correction (November 1, 2026): An earlier version stated the 1TB breach as fact. That figure is the attackers' claim.
