AU Bank says core services remain safe during data-leak investigation
Customers still await confirmation of whether sensitive identity records were exposed.
Overview
AU Small Finance Bank is checking a possible leak of vehicle-loan customer data. claimed on October 29 that it accessed the bank’s records, but no one has confirmed the claim. The data may include records, and details, credit reports, bank statements, loan forms, signed agreements and internal records.
The suspected data is on a , separate from the bank’s main systems. AU Bank says its systems and banking services are not affected. says it found no related weakness in its platform. The bank must now check permissions, login details, connected systems and logs. This will show whether access occurred, what data was exposed and who was responsible. Customers should wait for official updates about warnings, protective steps or fixes.
Timeline
AU Bank continued investigating a possible leak involving limited vehicle-loan data
AU Small Finance Bank said its own systems and banking services remained unaffected while it investigated a potential leak involving limited vehicle-loan customer data on a . Public reports did not establish whether customer records were exposed or whether notification or remediation had occurred.
The alleged breach remained unverified despite responses from AU Bank and Salesforce
The public record still consisted of a , AU Bank’s investigation and Salesforce’s statement that it had found no related platform vulnerability. No cited report independently confirmed that the claimed records belonged to AU Bank customers or that they had been accessed or removed. The scope and authenticity of the alleged exposure therefore remained unresolved.
Salesforce said it had identified no vulnerability in its platform related to the incident
Salesforce said that, based on the information available to it, it had not identified a vulnerability in the related to the issue. The company said its teams were proactively supporting customers as needed. The statement addressed platform vulnerability, but did not by itself resolve questions about credentials, permissions or .
The investigation focused on a possible leak from a Salesforce-hosted platform
AU Small Finance Bank said it was investigating a potential data leak involving a containing limited vehicle-loan customer data. Public reporting did not establish the access path, the specific controls examined, or responsibility between the bank and Salesforce.
AU Bank said its core systems and banking services remained unaffected
AU Bank distinguished the Salesforce-hosted customer-data environment from its own . The lender said its systems had not been affected and that banking services were operating normally. This statement did not establish whether records held in the separate vehicle-loan platform had been accessed.
Hackers alleged exposure of KYC, PAN, Aadhaar and financial loan records
The alleged dataset was reported to include , identity documents, and details, credit reports, bank statements, loan applications and signed agreements. Other claimed categories included insurance records, CRM data, employee information, login histories and audit logs. AU Bank had not validated that these records were authentic, accessed or exfiltrated.
AU Small Finance Bank opened an investigation into a potential vehicle-loan data leak
AU Bank said it was investigating a potential data leak involving the Salesforce-hosted platform. The bank described the information as limited data relating to vehicle-loan customers and did not characterize the hacker’s allegations as a confirmed breach. Its statement marked the first public response from the lender.
Threat intelligence linked the alleged exposure to AU Bank’s Salesforce-hosted vehicle-loan platform
Reports identified the alleged target as a managed and hosted by Salesforce for AU Bank’s vehicle-loan business. The platform held limited vehicle-loan customer data, rather than serving as the bank’s . The bank did not confirm that the platform contained all of the records claimed by the hackers.
ScarlettGroup claimed it accessed AU Small Finance Bank data and threatened disclosure
The hacking group ScarlettGroup reportedly claimed that it had breached AU Small Finance Bank and obtained customer and internal corporate information. The claim entered public view through reporting, but the alleged breach had not been independently verified. Hackmanac said verification of the claim was still pending.