Bank of Baroda has filed a preliminary claim under its cyber insurance policy after a suspected data breach exposed nearly 1 TB of customer data on the darknet. The bank has informed lead insurer National Insurance Company under a cyber insurance programme with a total cover of about ₹750 crore. According to sources familiar with the matter, the claim has been lodged as a notice of loss, allowing insurers to begin assessing the incident while forensic investigations continue. The loss limit is approximately ₹300 crore, with the eventual payout depending on the extent of financial losses, regulatory action, business disruption and third-party liabilities arising from the breach.
The alleged breach was reported to insurers after being notified to the Indian Computer Emergency Response Team (CERT-In). Bank of Baroda has confirmed that its recent data leak resulted from the compromise of a single employee's email account and did not affect its core banking systems. The bank has launched a forensic investigation, informed regulators, and notified a cyber insurance claim while authorities assess the impact of the alleged data breach. According to The Economic Times, the suspected data breach exposed nearly 1 TB of customer data on the darknet. Cybersecurity specialists and forensic investigators are now examining the incident to determine the source of the breach, assess the extent of data exposure and contain any further compromise.
Insurance industry executives revealed that initial costs typically range between ₹50 lakh and ₹4 crore depending on the complexity of the attack, with most incidents costing around ₹1-3 crore. However, they emphasized that forensic expenses are often only a small part of the overall loss. The real financial exposure arises if the breach leads to prolonged business interruption, customer litigation or regulatory action. A prolonged disruption to banking operations could trigger business interruption claims, while additional costs may arise from replacing compromised debit or credit cards, notifying affected customers, legal defence, crisis communication and restoring IT systems. The cyber insurance programme carries an annual premium of around ₹6 crore and is backed by multiple domestic insurers and reinsurers, with National Insurance acting as the lead insurer responsible for coordinating claims.
The incident could invite scrutiny from multiple regulators, with penalties under the Information Technology Act extending up to ₹5 crore in certain cases. Listed companies may also face regulatory action if cybersecurity lapses are established. According to cyber insurance experts, the bank's core banking systems were not accessed and continue to remain secure, with immediate containment measures implemented after the matter was promptly identified. The bank is working closely with relevant authorities in accordance with applicable regulatory requirements while comprehensive forensic investigations continue.
Market experts provided mixed recommendations for banking stocks, with Bank of Baroda Ltd. trading at ₹240.30 receiving a hold rating from CA Tapan Doshi. According to his analysis, the bank faces challenges from data breach impacts on net interest margins and intensifying deposit competition. However, retail loan performance is improving and non-performing assets remain under control. Doshi suggests waiting for an 8-10% correction before considering entry into the stock.
