Breaches and incidents
Bharat Co-operative Bank (Mumbai) (India): RBI penalty for not reporting IT outages as cyber incidents
RBI imposed a Rs 3.75 lakh penalty by order dated 17 Sep 2025 because the bank did not report incidents such as “unplanned downtime” that caused...
- Disclosed
- Verification
- Checked against a primary source
What happened
- RBI imposed a Rs 3.75 lakh penalty by order dated 17 Sep 2025 because the bank did not report incidents such as “unplanned downtime” that caused significant customer service disruption due to unavailability of its IT systems, as required by RBI directions on “Reporting of Unusual Cyber Security Incidents”.
- Root cause: reporting process failure, per RBI.
- Attacker: not applicable.
- Response: penalty imposed; RBI release dated 18 Sep 2025.