AU Small Finance Bank is investigating a potential data leak involving a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which holds limited data relating to its vehicle loan customers, the bank said in a statement reported by The Hindu BusinessLine on October 30. The bank reaffirmed that its own systems remain unaffected and all banking services are operating normally.
Source: The Hindu BusinessLine
The investigation follows a claim by a threat actor calling itself ScarlettGroup, flagged by cyber threat-intelligence accounts on X, that it breached the bank's systems. The group claims the data includes KYC records, identity documents, PAN and Aadhaar details, credit reports, bank statements, loan applications and signed agreements, along with CRM records, employee data and audit logs — claims that are unverified and unvalidated, Gadgets360 reported, citing the bank's response.
Source: Gadgets360
A person familiar with the matter told BusinessLine that the issue was under investigation across all verticals, even though only the bank's Wheels (vehicle loan) vertical may have had a potential breach, and that the claims of KYC data vulnerability are unverified. The bank has not disclosed how many customers may be affected, and no exchange filing on the incident was found in the reports.
Source: The Hindu BusinessLine
Digit's explainer on the incident likewise notes that the alleged exposure rests on the hacker group's claims, that neither the scale nor the contents of any leak has been independently verified, and that the platform in question holds only limited vehicle-loan customer data, according to the bank.
Source: Digit
What happens next turns on the bank's investigation: whether any customer data actually left the Salesforce-hosted platform, how many vehicle-loan customers are involved, and whether the bank makes a formal disclosure. Until then, the ScarlettGroup claims should be treated as allegations, not established facts.
Source: Gadgets360