Bank of Baroda says an employee's email account was compromised and that its core banking systems were not accessed. Separately, a hacker on a darknet forum is advertising what they claim are the bank's customer records, loan documents, internal emails and audit files.

"Core banking was not affected" answers a question nobody asked. If a single mailbox reached loan files and audit reports, the access design is the finding.

The bank still hasn't said whether any customer data actually left.