The bank is investigating a possible data leak involving a Salesforce-hosted platform after a hacker group claimed to have accessed sensitive customer information, including KYC documents, PAN and Aadhaar details.
Highlights
- AU Small Finance Bank investigating a potential data leak involving vehicle loan customers.
- Possible exposure linked to a Salesforce-managed software-as-a-service (SaaS) platform.
- Bank says its internal systems remain unaffected and services are operating normally.
- Hacker group ScarlettGroup claims to have accessed sensitive customer and corporate information.
- AU Small Finance Bank shares declined 1.76% to ₹864 on the BSE.
Mumbai, October 30, 2026: AU Small Finance Bank on Friday said it is investigating a potential data leak involving vehicle loan customers after a hacker group claimed to have breached its cybersecurity defences and accessed sensitive customer information.
The lender clarified that its internal banking systems remain unaffected and all banking services are functioning normally.
Potential Data Leak Linked to Salesforce Platform
According to the bank, the suspected incident involves a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which contains limited information relating to vehicle loan customers.
“AU Small Finance Bank is investigating a potential data leak involving a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which holds limited data relating to our vehicle loan customers,” the bank said in its statement.
The lender emphasised that its own systems have not been affected by the suspected incident.
Hacker Group Claims Access to Sensitive Customer Records
The investigation follows claims by a hacking group identified as ScarlettGroup, which allegedly threatened to release sensitive customer and internal corporate information.
Cyber threat intelligence platform Hackmanac reported that the group claimed to have accessed various categories of information, including KYC records, personal identification documents, PAN and Aadhaar details, credit reports and bank statements.
The alleged compromised information also includes loan applications, signed agreements, insurance records, customer relationship management (CRM) data, employee information, login histories and audit logs.
However, Hackmanac clarified that the hacking group’s claims remain unverified. The bank has not confirmed that all the categories of data claimed by the attackers were compromised.
Cybersecurity Concerns Across Banking Sector
The development comes amid reports of potential cyber incidents involving several Indian financial institutions.
Recent reports have also mentioned State Bank of India and ICICI Bank among lenders allegedly targeted by cybercriminals, although the reported claims do not independently establish successful breaches.
Prime Minister Narendra Modi recently highlighted the potential threat of cyberattacks to India’s economy and urged stakeholders to strengthen cybersecurity preparedness.
He made the remarks during an event marking the inauguration of an RBI cybersecurity training institute in Bhubaneswar.
AU Small Finance Bank Shares Decline
Following the developments, AU Small Finance Bank shares closed 1.76% lower at ₹864 apiece on the Bombay Stock Exchange (BSE) on Friday.
The bank continues to investigate the suspected incident while maintaining that its core banking infrastructure and customer-facing services remain operational.
