New Delhi: Bank of Baroda has said that only one employee’s corporate email account was compromised and that its core banking systems remain secure. However, cybersecurity experts say a single breached account can potentially provide access to a large volume of sensitive internal information if it belongs to a senior employee with extensive privileges.
According to cybersecurity analysts, corporate email accounts are often linked to internal platforms such as SharePoint, OneDrive and other enterprise systems through Single Sign On technology. If attackers gain access to such an account, they may be able to retrieve years of archived emails, audit reports, operational documents and cloud stored files.
Researchers who reviewed an alleged 1TB dataset circulating on the dark web claimed it contains customer records, account details, identity documents, loan related files, internal audit reports and operational records. The authenticity and full scope of the leaked data have not been independently verified.
Following the incident, the bank said it blocked unauthorised access routes, isolated the affected email account and launched a forensic investigation with external cybersecurity experts. Regulatory authorities, including CERT In, have also been informed, while cyber insurance procedures have been initiated.
Experts believe the hackers may have released the data publicly without demanding a ransom for strategic reasons. Such leaks can help cybercriminal groups build their reputation, attract buyers for undisclosed stolen data or network access, and increase pressure on organisations through widespread public attention and regulatory scrutiny.
Cybersecurity specialists caution that investigations are still ongoing and the exact method used to obtain the alleged data, as well as the extent of any exposure, will only become clear after a detailed forensic analysis. Until then, customers are advised to remain alert for phishing attempts and monitor their banking accounts for any suspicious activity.
Sorry, there was a YouTube error.
