Bank of Baroda is raising its technology security budget beyond the traditional 10% of operating profit following a July 2026 data breach involving an employee email account. The move, supported by a record Q2 FY27 profit of ₹6,532 crore, aims to bolster digital defenses against future threats. Investors are watching how this increased spending impacts near-term margins and the bank’s upcoming transition to new credit loss standards.
Bank of Baroda is shifting its approach to digital security, committing to increase its technology defense spending beyond the historical 10% ceiling of its operating profit. This strategic move follows a cybersecurity incident in July 2026, where a compromised employee email account led to unauthorized access to certain data.
Scaling Digital Defenses
The lender has confirmed that its core banking systems remained secure during the July incident and were not impacted by the breach. However, to mitigate future vulnerabilities, the bank is now prioritizing a comprehensive overhaul of its security framework. Managing Director Debadatta Chand stated that the bank is working with external consultants and government agencies, including Cert-In, to fortify its digital perimeter.
This initiative involves three core areas: technology upgrades, stricter user access management, and enhanced personnel training. The strategy specifically addresses human-centric risks, which were identified as the root cause of the July breach. By moving past the traditional 10% cap on IT spending, the bank aims to align its infrastructure with global security benchmarks.
Financial Position and Growth
Bank of Baroda remains in a strong financial position to absorb these additional costs, having reported a record quarterly profit of ₹6,532 crore for the second quarter of the 2027 fiscal year. The bank has also demonstrated confidence in its core business, recently raising its loan growth guidance for FY27 to 13-15%, an increase from its earlier projection of 12-14%.
Beyond technology costs, the bank is currently preparing for the mandated transition to the Expected Credit Loss (ECL) provisioning system, which is scheduled for April 1, 2027. To prepare for this, the institution is focusing on recoveries from previously written-off accounts to bolster its provisioning buffers. While there have been market discussions regarding the potential divestment of its life insurance subsidiary, management indicated that any such decision depends on sustained business performance and current valuations.
Risks and Monitoring
Investors may monitor the potential impact of these elevated technology costs on the bank’s operating margins in the coming quarters. While the core banking system remains secure, the incident has highlighted broader operational risks, including potential phishing attempts, secondary fraud, and ongoing regulatory and reputational scrutiny related to the exposure of customer documentation. The effectiveness of the new security protocols in preventing future incidents and the bank’s ability to manage costs while maintaining loan growth will be key areas to track as the financial year progresses.