Alleged 1TB Cybersecurity Breach Rocks Bank of Baroda
State-owned Bank of Baroda has reportedly come under intense scrutiny following claims of a massive cybersecurity breach. Reports circulating online indicate that nearly 1 Terabyte (TB) of highly sensitive customer and internal banking data has surfaced on the dark web. The alleged breach comes at a particularly challenging time for the public sector lender, coinciding with a steep decline in its first-quarter earnings for FY27 and a subsequent drop in its share prices during Monday’s trading session.
While news of the leak has sparked widespread concern among account holders and financial analysts, official authorities including the Reserve Bank of India (RBI), the Indian Computer Emergency Response Team (CERT-In), and Bank of Baroda itself have not officially confirmed or verified the security breach claims.
Extensive Range of Customer and Internal Records Allegedly Exposed
According to media reports and cyber researchers, the compromised database uploaded to the dark web contains a vast array of critical personal and operational information. The reportedly exposed records include customer Aadhaar numbers, full names, savings and current account details, loan history, NetBanking user credentials, and specialized banking records belonging to non-resident Indians (NRIs) and corporate clients.
Furthermore, internal operational documentation was also allegedly leaked. This includes branch audit reports, confidential vigilance investigation files, bobWorld audit documents, internal communications, customer onboarding applications, and operational documents linked to various bank branches and ATMs across India. Cybersecurity expert Srikanth Lakshmanan, who reviewed sample files online, categorized the incident as a potential “cyber disaster.” Some cybersecurity channels have linked the incident to a hacking group known as TripleX, though independent verification remains pending.
Financial Performance Impacted: Q1 Net Profit Drops 72%
The cyber incident report compounded existing market pressure on Bank of Baroda shares, which opened lower at Rs 243.50 and touched a low of Rs 241.90 before trading around Rs 244.20. Investor sentiment was primarily dampened by the lender’s Q1 FY27 financial results, which revealed a sharp 72% year-on-year drop in net profit to Rs 1,278 crore, down from Rs 4,541 crore during the same quarter in the previous fiscal year.
This significant profit decline was largely driven by a one-time exceptional charge of Rs 5,700 crore. This charge arose from an out-of-court settlement related to long-standing legal proceedings involving UAE-based healthcare company NMC Health. Without this one-time expense, the bank’s operational net profit would have actually expanded by approximately 22% year-on-year, maintaining a healthy Return on Assets (RoA) of around 1.1%.
Core Banking Operations and Asset Quality Outlook
Despite the headline profit contraction, Bank of Baroda’s core operational fundamentals demonstrated resilience. Net Interest Income (NII) registered a growth of 9.5% year-on-year, rising to Rs 12,524 crore from Rs 11,435 crore. However, the Net Interest Margin (NIM) experienced a slight sequential compression of 12 basis points due to reduced asset yields, while core fee income fell by 22%.
On the asset quality front, the bank made noticeable progress. Gross Non-Performing Assets (GNPA) improved to 1.99% from 2.24% a year prior, while Net Non-Performing Assets (NNPA) dropped from 0.60% to 0.50%. The bank’s Capital Adequacy Ratio (CAR) remained robust at 16.31%, providing a solid buffer against ongoing operational challenges.
Official Stance and Key Safety Advisory for Banking Customers
As of now, the claims surrounding the 1TB data leak remain unconfirmed by regulators and bank officials. Pending official investigations, cybersecurity specialists advise all Bank of Baroda account holders to practice strict digital security hygiene. Customers are urged to update their NetBanking passwords, enable multi-factor authentication, monitor account statements for unusual transactions, and strictly refrain from sharing OTPs, PINs, or personal credentials with anyone claiming to represent the bank.
