Breaches and incidents

Bank of Baroda (India): employee email account compromised, TripleX claims 1 TB

Bank of Baroda (public sector bank) said on X: “The incident involved compromise of an employee’s email account, resulting in unauthorised access to...

Disclosed
Verification
Reported by a reputable outlet, citing the company

What happened

  • Bank of Baroda (public sector bank) said on X: “The incident involved compromise of an employee’s email account, resulting in unauthorised access to certain data”, and that core banking systems were not accessed. A group named TripleX (per Moneycontrol, via The Week) listed about 1 TB on 24 Jul 2026, claiming 100,000 to 300,000 customer application forms with photos and identity documents; this claim is unverified.
  • Root cause: business email compromise of one employee account per the bank; method not disclosed by the bank.
  • Attacker: TripleX (claimed).
  • Response: containment, forensic investigation, engagement with authorities under regulatory requirements.