Bank of Baroda Confirms Email Account Compromise, Says Core Systems Unaffected
Summary
Bank of Baroda said a compromised employee email account enabled unauthorized access to certain data. The bank said it contained the incident and its core systems were unaffected; claims that customer data was leaked remain unverified.
Key points
- Bank of Baroda confirmed an employee’s email account was compromised, allowing unauthorized access to certain data.
- The bank said it detected and contained the incident immediately; its core banking systems were not accessed or affected.
- The bank said an investigation is ongoing and did not confirm whether customer data was exfiltrated.
- Researchers linked the incident to data advertised for sale by an actor calling itself “leak-king-F”; the authenticity of the purported data could not be independently verified.
- The bank did not attribute the incident to a specific hacking group.
Article Details
- Victim Organization
- Bank of Baroda
- Incident Type
- An employee email account was compromised, allowing unauthorized access to certain data. The alleged theft and publication of data were not independently verified.
- Data Types Exposed
- The bank confirmed unauthorized access to certain unspecified data.
- An alleged leak listing described customer information, corporate banking records, internal emails, loan documents, and audit files; the authenticity of the data could not be independently verified.
- Affected Records
- Unknown
- Affected Data Size
- Unknown
- Operational Impact
- The bank said it detected and contained the incident immediately. It stated that core banking systems were not accessed or affected.
- Ransom Or Extortion
- The actor reportedly advertised the purported data for sale on a darknet marketplace and directed prospective buyers to a Telegram channel. No ransom demand against Bank of Baroda was reported.
- Claim Status
- confirmed
Threat Actors
leak-king-FResearchers reported that an actor using this name advertised purported Bank of Baroda data for sale and directed buyers to a Telegram channel. The authenticity of the purportedly leaked data was not independently verified.World LeaksThe article reported that World Leaks claimed responsibility for a separate attack on Tata Electronics and claimed to have published files from contractors working on a nuclear power project.
Countries
IndiaOne of India’s largest state-owned banks has reported a cybersecurity incident after a threat actor claimed to have stolen and published sensitive banking data.ThailandRelated incidents were reported at Thailand Securities Depository and Tata Electronics, while World Leaks claimed other recent breaches.