AU Small Finance Bank Probes a Potential Data Leak
The bank said its own systems are unaffected after a hacking group claimed a breach on the dark web.
Key Takeaways
- AU Small Finance Bank said it is investigating a potential data leak.
- The bank said the platform holds data on its vehicle loan customers.
- The bank said its own systems remain unaffected and banking services are operating normally.
- A group calling itself ScarlettGroup claimed a breach; outlets could not verify it.
- The bank did not say how many customers may be affected.
Table of Contents 5 sections
AU Small Finance Bank has said it is investigating a "potential data leak" involving a Salesforce-hosted platform, after a hacking group claimed on the dark web that it had breached the bank. The claim has not been independently verified.
The bank said the platform holds data on its vehicle loan customers, and that its own systems are unaffected and banking services are running normally. The hacking group claims to hold customer, credit and employee records.
AU Small Finance Bank data leak probe at a glance
| Detail | Value |
|---|---|
| Bank | AU Small Finance Bank |
| What the bank said | It is investigating a potential data leak involving a Salesforce-hosted platform that holds data on its vehicle loan customers |
| What the bank said about its systems | Its own systems remain unaffected and all banking services are operating normally |
| Who made the claim | A hacking group calling itself ScarlettGroup |
| Where the claim was flagged | On X by the cyber threat tracking account Hackmanac |
| When the claim surfaced | October 29, 2026 |
| Status of the claim | Not independently verified by the outlets reporting it |
What the hackers claimed, and what is still unconfirmed
The group claimed it holds KYC records, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements and insurance records, according to Inc42 and ThePrint. It also claimed access to CRM data, employee information and audit logs, and threatened to publish the data.
MediaNama said it could not independently verify that the group holds any original AU Small Finance Bank data. Inc42 said the bank did not say how many customers may be affected.
How AU Small Finance Bank uses Salesforce for vehicle loans
AU Small Finance Bank partnered with Salesforce in 2024 to digitise onboarding for its vehicle loan customers, according to Inc42 and ThePrint.
| When | What happened |
|---|---|
| 2024 | AU Small Finance Bank partnered with Salesforce to digitise vehicle loan onboarding |
| October 29, 2026 | The ScarlettGroup claim about AU Small Finance Bank surfaced and was flagged by Hackmanac on X |
| October 30, 2026 | The bank told ThePrint it is investigating a potential data leak |
Where the AU Small Finance Bank probe stands
AU Small Finance Bank said it is investigating a potential data leak involving a Salesforce-hosted platform that holds data on its vehicle loan customers. The hacking group's claim, which lists KYC, credit and employee records, has not been independently verified by MediaNama, Inc42 or ThePrint. The bank said its own systems remain unaffected and banking services are operating normally.
More news
Frequently Asked Questions
What did AU Small Finance Bank say about the data leak?
Who claimed to have breached AU Small Finance Bank?
How did the claim about AU Small Finance Bank come to light?
When did the claim about AU Small Finance Bank surface?
What data did the hackers claim to hold?
Has the hackers' claim about AU Small Finance Bank been verified?
How did AU Small Finance Bank describe its own systems?
How many AU Small Finance Bank customers may be affected?
Did AU Small Finance Bank confirm the Salesforce platform was the source?
What is the Salesforce platform AU Small Finance Bank mentioned?
How is AU Small Finance Bank linked to Salesforce?
Which outlets reported the AU Small Finance Bank data leak probe?
More in Tech
Jio Platforms Q2 Profit Rises 13.7% to About Rs 8,390 Crore
Jio Platforms posted about Rs 8,390 crore profit in its first results after listing on the exchanges.
Nasscom Seeks Delay in New GST Rules for E-Commerce Deliveries
Nasscom wants new GST rules on e-commerce delivery services deferred to 1 January 2027.
Pine Labs Q2 Profit Rises Over 6X to Rs 38.6 Crore
Pine Labs posted a Q2 FY27 profit of Rs 38.6 crore on revenue of about Rs 806 crore, up 24%.