Data Breach

Bank of Baroda's cybersecurity incident has highlighted how a single compromised employee email account can create risks for an entire organisation. On July 27, 2026, the bank confirmed that an employee's email account had been accessed without authorisation, exposing certain data. The bank stated that the incident was detected and contained quickly, its core banking systems remained unaffected, and an investigation was initiated with the relevant authorities.

The State Bank of India (SBI) has reported a suspected data leak after identifying 3,897 customer records containing personal information in a dataset of approximately 3.75 lakh records found on the dark web. In its October 21, 2026, stock exchange filing, the bank said the findings were preliminary and that an investigation was underway to establish the authenticity, source and extent of the exposure.

A North Korea-linked threat actor known as Jade Sleet has been linked to a cyberattack on an Indian IT services company, highlighting how attackers can target developers to gain access to wider business infrastructure.

Google Cloud reports how hackers use autonomous AI agents to harvest thousands of credentials, target cloud systems, and expose supply chains.

New Android ransomware Mantax Otax encrypts files, steals OTPs, records screens, captures PINs, and secretly takes photos of victims.

Veradigm confirms a third-party data breach exposing sensitive patient information, including Social Security numbers, through compromised vendor credentials.

A ChatGPT security flaw could allow hidden prompts to access Gmail data, chat history and files through an unintended internal communication channel.

Mathspace data breach affects over 1 million users after attackers exploited a critical Metabase SQL injection vulnerability.

Nutex Health disclosed a cybersecurity breach after hackers accessed its network and exfiltrated data. Investigation into exposed healthcare and business information is ongoing.

A new crypto scam uses Claude Code, phone databases, phishing, and fake wallet apps to target cryptocurrency users and steal recovery phrases.