300,000 customers’ Aadhaar records surfaced on the dark web.

Bank of Baroda said one compromised employee email account leaked the data; “core banking is secure” is true and beside the point, since identity documents sat in the mailbox beside it.

Unlike a card number, India’s Aadhaar identifier cannot be reissued, and no statutory breach-notification regime yet applies.

Sources: News18