Bank of Baroda Data Breach Leaks Customer and Internal Records

Bank of Baroda Data Breach Leaks Customer and Internal Records

Bank of Baroda says an employee email breach led to customer and internal data being leaked online. Here’s what was taken, why it matters, and how you can protect yourself.

What Happened?

According to Reuters, Bank of Baroda reported a data breach on July 27, 2026, after customer and internal records appeared online.

The Indian state-run bank said someone gained access through an employee email account. The bank contained the incident, started a forensic investigation, and contacted relevant authorities.

Bank of Baroda said its core banking systems were not accessed and remain secure. However, leaked financial and identity records may still help criminals create convincing phishing messages, fake bank calls, or fraud attempts.

Your information may also have been leaked in another incident without you knowing. Checking for data leaks can help you notice potential risks before suspicious activity appears.

Futureproof monitors your data for leaks 24/7 and helps you reduce scam risks with simple, clear steps.

Who Was Affected and What Data Was Leaked?

Bank of Baroda has not said how many customers were affected.

Cybersecurity researcher Srikanth L said the leaked files included customer details, identification documents, loan papers, and internal audit records.

The online collection was advertised as containing more than 700 gigabytes of information. However, the bank has not confirmed every file in the collection.

Identification and loan records can help criminals create convincing phishing emails, fake bank calls, identity theft attempts, or loan fraud.

Keep your personal information scam-proof

Futureproof keeps your data safer with simple guidance to set a strong password, turn on 2-step verification, and lock down your account.

Check my safety

How Someone Entered the Bank Employee’s Email

Bank of Baroda said the breach started through an employee email account.

However, the bank has not explained how someone gained access to that account. It has not confirmed whether phishing or a stolen password was involved.

The investigation may provide more details later. For now, the bank says its core banking systems were not accessed.