Gujarat CID reports that cyber criminals leveraged a critical banking software vulnerability to siphon off ₹7.34 crore. The probe continues, with 14‑15 other banks possibly exposed to the same flaw.
Key Takeaways
- Hackers stole ₹7.34 crore from Gujarat Bank
- Software flaw could affect 14‑15 other banks nationwide
- Gujarat CID continues investigation into a wider cyber‑crime network
The Gujarat Central Investigation Department (CID) disclosed that an organized hacking group exploited a critical weakness in the bank's core software, resulting in an unauthorized transfer of ₹7.34 crore. The breach was detected on Friday night when the bank’s internal monitoring system flagged irregular transaction patterns.
How the Software Vulnerability Was Exploited
Investigators believe the same flaw may exist in the core banking platforms of 14‑15 other financial institutions across India. Typical vulnerabilities of this nature include insecure API endpoints, inadequate encryption, or outdated patch management—issues that seasoned attackers can bypass with relative ease.
Rising Tide of Cyber Crime in India
Cyber‑fraud incidents in India have surged by over 40 % in the past two years, according to the Ministry of Electronics and Information Technology. A comparable breach hit Indian Bank in 2022, resulting in a loss of roughly ₹5 crore, underscoring a pattern of sophisticated attacks targeting the financial sector.
Regulatory Response and Potential Ripple Effects
The Reserve Bank of India (RBI) has instructed all banks to conduct immediate software audits and report any inconsistencies in transaction logs. Should the investigation confirm that the same vulnerability exists in the cited 14‑15 banks, the sector could face heightened systemic risk and a dip in consumer confidence.
Future‑Proofing Banking Security
Cyber‑security experts advocate for mandatory end‑to‑end encryption, multi‑factor authentication, and continuous penetration testing. Additionally, regular employee awareness programs and real‑time threat‑intelligence feeds are essential to thwart similar attacks before they materialise.