AU Small Finance Bank investigates potential data leak

AU Small Finance Bank is investigating a potential data leak involving a third-party software-as-a-service (SaaS) platform hosted by Salesforce. The bank stated that the incident involves limited data related to its vehicle loan customers.

While a hacker group, identified as ScarlettGroup, has claimed to have breached the bank's defenses and threatened to release sensitive information including KYC documents, Aadhaar details, and bank statements, these claims have not been independently verified. The bank has maintained that its internal banking systems remain unaffected and all services are operating normally.

Salesforce has responded to the incident, stating that it has not identified any vulnerability within its own platform related to this issue. The company noted that it does not comment on specific customer issues as a matter of policy but is proactively engaging to support customers.