
RBI Governor Sanjay Malhotra said large banks and regulated entities have strong IT systems, days after a reported cyber breach at Bank of Baroda. Mint reports that about 1 terabyte of customer…
RBI Governor Sanjay Malhotra said large banks and regulated entities have strong IT systems, days after a reported cyber breach at Bank of Baroda. Mint reports that about 1 terabyte of customer and internal data may have been exposed after an employee’s email account was compromised. The leaked files reportedly include KYC records, loan documents, account details, audit reports and vigilance records. Bank of Baroda said its core business continued without disruption and that it was assessing the incident. Cyber investigator Ritesh Bhatia, cited by the Economic Times, said PAN, Aadhaar, passport photographs and other identity documents surfaced on the dark web.

The RBI governor said banks face new threats and are strengthening security through checks, supervision and remedial action. The regulator had earlier asked banks to review cyber gaps and prepare artificial intelligence governance frameworks. The breach has renewed concern about employee credentials, data theft and fraud using stolen identities and mule accounts.

The lazy narrative is that one breach proves Indian banking is unsafe. The opposite claim, that rules and strong systems make such incidents routine, is equally complacent. A compromised employee account can defeat expensive controls, while exposed KYC files can aid fraud long after operations recover. The useful test is not whether the bank stayed open, but whether it identifies affected customers, closes the access gap and reports the findings clearly. Will the RBI publish a time-bound account of the corrective action?
Sources (3): ciso.economictimes.indiatimes.com, livemint.com, rediff.com
This story was synthesised by AI from the 3 sources linked above.
Updated: this story now draws on 3 sources.