AU Small Finance Bank said on Oct 30 that it is investigating a possible data leak from a Salesforce-hosted SaaS platform after HackRisk.io flagged a claim by ScarlettGroup.
The hacking group alleges it accessed KYC records of vehicle loan customers and threatened to publish the data, while the bank maintains that its core banking systems have not been compromised and all services are operating normally.
The incident was first reported on X by HackRisk.io on Oct 29, citing the group’s post; the bank’s spokesperson said it has alerted cyber security authorities and is conducting a forensic analysis.
According to the spokesperson, the potential breach involves limited customer data but could impact up to 2,500 vehicle loan borrowers.
The regulator, RBI, has issued a notice to the bank to submit a detailed incident report within 48 hours.
The next step will be a meeting with the RBI’s cyber safety cell scheduled for Nov 3.