BoB's 15,774-File Leak: Anatomy of India's Worst PSU Bank Breach
BoB’s 15,774-File Leak: Anatomy of India’s Worst PSU Bank Breach On the morning of July 26, a Tor hidden service went live carrying what may be the most comprehensive single breach of an Indian public sector bank’s internal systems ever documented. 15,774 files. 2,671 subdirectories. No authentication required to access any of it. The Triple X ransomware group — a new actor first detected in May 2026 — published the complete directory tree of Bank of Baroda’s internal SharePoint / Windows file server. Our team crawled the dump server for 995 seconds across 925 HTTP fetches with zero errors. This analysis is based on the metadata alone: file names, directory paths, and structure. We downloaded nothing. ...