2026 Bank of Baroda — Triple X leak-site claim; ~1TB / 100k–300k account forms (unverified)
Data compromised
Actor-claimed ~1TB; approximately 100,000–300,000 account-opening forms with personal information/documents and ID-card photographs (actor text on Ransomware.live) — unverified. BreachHistory indexes 100,000 as the lower cited actor range.
Technical writeup
Unverified leak-site / extortion claim — discovered July 24, 2026 on Ransomware.live. Actor group Triple X listed India’s Bank of Baroda, advertising about 1TB of data and describing roughly 100,000–300,000 account-opening forms with personal documents and national-ID photographs as freely downloadable. Bank of Baroda had not publicly confirmed the claim in sources reviewed. BreachHistory indexes 100,000 (lower actor range), labeled unverified.
Root cause
Unverified Triple X leak-site listing naming Bank of Baroda and advertising ~1TB of “people’s data” including account-opening forms — bank had not confirmed at indexing time