Breaches and incidents
Ballari District Co-operative Central Bank (India): account numbers and IFSC codes altered in RTGS/NEFT XML files, Rs 2.34 crore diverted
During a routine transfer from BDCC Bank to IDBI Bank on 10 Jan 2025, attackers altered account numbers and IFSC codes in the XML payment files while...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- During a routine transfer from BDCC Bank to IDBI Bank on 10 Jan 2025, attackers altered account numbers and IFSC codes in the XML payment files while leaving beneficiary names unchanged; transfers above Rs 5 lakh were diverted, Rs 2.34 crore in all, to 25 accounts in northern states. Branches complained the same day and the fraud was confirmed on 13 Jan (News Karnataka; IBTimes India, 24 Jan 2025).
- Root cause: tampering with payment files between generation and submission; how the attackers reached the files is not disclosed.
- Attacker: unidentified. Complaint at Hosapete Town police, transferred to Ballari CEN police; FIR under the IT Act and BNS.
- Response: the bank suspended RTGS/NEFT transfers during the probe.