Unverified claim. On July 24, 2026, extortion group Triple X listed India’s Bank of Baroda on a leak tracker, advertising about 1TB of data and describing roughly 100,000–300,000 account-opening forms with personal documents and ID photographs.
The bank had not confirmed the listing in sources reviewed. Treat the count and fields as the actor’s marketing until a regulator or bank notice says otherwise.
Action items
- Customers: use only official Bank of Baroda apps/branches—not links in scare messages.
- Watch for KYC “re-verify your Aadhaar/PAN” phishing.
- If you later receive a bank notice listing ID photos, follow the bank’s credit-monitoring advice and file complaints with Indian cybercrime portals as directed.
Canonical record
Bank of Baroda Triple X claim. Source: Ransomware.live.