AU Small Finance Bank investigates data leak on its Salesforce platform
AU Small Finance Bank customer data (Salesforce SaaS platform)
AU Small Finance Bank, an Indian lender with about 12.2 million customers, is investigating a potential data leak involving a SaaS platform managed and hosted by Salesforce that holds limited data on its vehicle loan customers. The probe follows claims by the ScarlettGroup hacking group that it stole and will leak KYC records, PAN and Aadhaar details, credit reports, bank statements, loan agreements, CRM data, employee records and audit logs. The bank says its own systems are unaffected and services run normally; it has not confirmed the hackers' claims or how many customers are affected. Expect targeted phishing and loan-related fraud calls.
Why this severity: Bank confirms a potential leak of limited vehicle loan customer data on a Salesforce-hosted platform; the attackers' broader claims are unconfirmed
- Started
- Oct 29, 2026
Affected
- Vehicle loan customer data held on AU Small Finance Bank's Salesforce-hosted SaaS platform (scope not disclosed)
Fixed in
- Under investigation by the bank; no containment details or customer notification announced yet
Timeline2
AU Small Finance Bank says it is investigating a potential data leak involving a SaaS platform managed and hosted by Salesforce that holds limited data on its vehicle loan customers, and that the bank's own systems are unaffected.
The ScarlettGroup hacking group claims to have breached AU Small Finance Bank and threatens to leak customer KYC, PAN and Aadhaar details, loan records, CRM data, employee records and audit logs.
News & write-ups4
- AU Small Finance Bank probes 'potential data leak' after hacker group claims breachMoneycontrol · Oct 30, 2026
- Au Small Finance Bank says investigating potential data leak involving SaaS platformThe Economic Times · Oct 30, 2026
- AU Small Finance Bank: ScarlettGroup claims data breach; bank says systems unaffectedCNBC TV18 · Oct 30, 2026
- AU Small Finance Bank Investigates Alleged Data Leak: Hackers Claim PAN, Aadhaar TheftTimes Now · Oct 30, 2026
Notes & caveats
The list of stolen data comes from the attackers' claims; the bank has only confirmed a potential leak of limited vehicle loan customer data.
Get an email when a new major security incident drops. No spam, unsubscribe any time.
