AU Small Finance Bank Investigates Possible Data Leak Amid Hacker Claims

New Delhi, October 30 (Daily Kiran) : AU Small Finance Bank is currently investigating a potential data leak that may be associated with a Salesforce-hosted software-as-a-service (SaaS) platform. This inquiry follows claims from a hacker group that they have infiltrated the bank's systems and accessed sensitive customer information. In a statement, the bank confirmed it is examining the possible data breach, which may involve limited data related to its vehicle loan customers.Importantly, the bank assured that its core banking systems remain unaffected, and all banking services are operating normally. The statement from AU Small Finance Bank emphasized, "We are investigating a potential data leak related to a SaaS platform managed and hosted by Salesforce. This platform holds limited information connected to vehicle loan customers. Our systems are secure, and all banking services continue as usual." This situation arose as reports surfaced indicating that the hacker group known as Scarlet Group has claimed responsibility for the alleged breach at AU Small Finance Bank.The group asserts that it has gained access to both customer and internal corporate data. Reports suggest that the leaked data could include sensitive information such as KYC records, personal identification documents, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements, insurance records, CRM data, employee information, login history, and audit logs. The implications of this incident have also affected the bank's stock performance.On Friday, shares of AU Small Finance Bank fell nearly 2% on the BSE, trading at approximately ₹860.45. According to exchange data, the stock has seen a high of ₹1,144.65 and a low of ₹832 over the past 52 weeks. Additionally, it is worth noting that earlier this month, a data breach involving the State Bank of India (SBI) was reported, where records of 3,897 customers were allegedly found on the dark web. In that case, the bank received alerts regarding potential data exposure from its threat intelligence service provider, the Defence Cyber Agency, and CERT-IN.