AU Small Finance Bank Investigates Potential Data Leak on Salesforce Platform

AU Small Finance Bank (AU SFB) announced it is investigating a potential data leak involving a software-as-a-service platform hosted and managed by Salesforce, which holds limited data of its vehicle loan customers. The bank stated that its core banking systems remain unaffected and all services continue to operate normally.

The disclosure follows a claim by a hacking group known as ScarlettGroup, which stated it breached the bank and accessed sensitive customer and internal corporate data. Published reports indicate the group threatened to leak this information.

Reported Exposure Details

• Customer Records: Alleged access to KYC records, PAN, and Aadhaar details.
• Financial Documents: Reported exposure of credit reports, bank statements, loan applications, and signed agreements.
• Other Data: Potential compromise of insurance records, CRM data, employee information, and internal audit logs.

These claims have not been independently verified. AU SFB has not confirmed whether the Salesforce-hosted platform under investigation is the source of the data claimed by ScarlettGroup, nor has it stated the number of potentially affected customers.

Practical Implications and Verification

• Core Systems Secure: The bank maintains that internal banking infrastructure is operating without disruption.
• Ongoing Investigation: Verification of the claims relies on the bank's active probe and independent cybersecurity assessments.
• Verification Methods: Stakeholders and customers can monitor official communications from AU Small Finance Bank and regulatory disclosures for verified updates.

In a related development, the State Bank of India (SBI) recently reported a suspected customer data exposure on the dark web involving 3,897 records, prompting a detailed investigation using an independent agency empanelled by CERT-In.