Bank of Baroda Share Price Falls After BoB Confirms Employee Email Breach Amid Data Leak Claims

Shares of Bank of Baroda (BoB) came under selling pressure on Monday after the state-owned lender confirmed a cybersecurity incident involving an employee's email account. The clarification came amid reports circulating online alleging that internal bank documents and customer-related information had been exposed in a suspected data leak.

Bank of Baroda Share Price Today on NSE

At 10:05 AM IST on July 28, Bank of Baroda shares were trading at Rs 240.35 on the National Stock Exchange (NSE), down 1.50% or Rs 3.65 from the previous close. The stock opened at Rs 242.80, touched an intraday high of Rs 244.70, and slipped to a low of Rs 240.00.

Bank of Baroda Data Leak: BoB Confirms Employee Email Account Breach

In an official statement, Bank of Baroda acknowledged that an employee's email account had been compromised, resulting in unauthorised access to certain data. However, the lender clarified that the breach was limited to the email account and did not extend to its core banking infrastructure.

It emphasised that its core banking systems were never accessed and continue to remain secure, assuring customers that routine banking operations, including deposits, withdrawals, fund transfers and account balances, were not affected by the incident.

The bank further stated that it has robust information security protocols in place and that the issue was identified quickly. Upon detecting the breach, immediate containment measures were implemented to prevent further unauthorised access. The lender has also initiated a comprehensive forensic investigation to determine the extent of the compromise and assess whether any sensitive information may have been exposed.

Data Leak Panic? Here's What Bank of Baroda Has Said

Bank of Baroda added that it is working closely with the relevant authorities and is complying with all applicable regulatory requirements while the investigation is underway. As of now, neither the Reserve Bank of India (RBI) nor the Indian Computer Emergency Response Team (CERT-In) has issued any public statement regarding the incident.

The alleged data leak first gained attention after cybersecurity observers flagged what appeared to be Bank of Baroda-related files circulating on online monitoring platforms. According to public posts shared by software engineer and CashlessConsumer founder Srikanth Lakshmanan on X, sample documents linked to the bank were visible online and a link to the alleged leaked dataset had reportedly been active.

Based on the information shared publicly, the alleged files included a combination of internal bank records and customer-related documents. These reportedly comprised branch audit reports, loan appraisal papers, internal communications, vigilance investigation records and other confidential banking documents. Sample files were also said to have been published online to support claims that the data was authentic.

However, the bank has not confirmed the nature or volume of the allegedly exposed information, and there has been no independent verification by regulators regarding the authenticity of the leaked documents. The forensic investigation launched by the lender is expected to establish the source of the breach, identify the data that may have been accessed and determine whether any customer information was downloaded or misused.

The incident has also sparked speculation regarding the possible involvement of a hacking group known as TripleX. Cybersecurity discussions on social media have linked the group to the alleged breach, with claims that it may have been responsible for publishing the data. TripleX has previously been mentioned in connection with an alleged cyberattack on an Indonesian bank.

However, no threat actor has officially claimed responsibility for the Bank of Baroda incident, and there is currently no official confirmation linking the group to the breach.

Although the incident has raised concerns among customers and investors, Bank of Baroda has reiterated that its core banking systems remain fully secure and operational.

Disclaimer: The views and recommendations expressed are solely those of the individual analysts or entities and do not reflect the views of Goodreturns.in or Greynium Information Technologies Private Limited (together referred as "we"). We do not guarantee, endorse or take responsibility for the accuracy, completeness or reliability of any content, nor do we provide any investment advice or solicit the purchase or sale of securities. All information is provided for informational and educational purposes only and should be independently verified from licensed financial advisors before making any investment decisions.