AU Small Finance Bank Probes Salesforce Data Leak

AU Small Finance Bank is investigating a potential data leak involving limited information of its vehicle loan customers hosted on a software-as-a-service platform managed by Salesforce. The probe follows claims by the ScarlettGroup hacking group, which listed the bank's website on a leak site on October 29. ScarlettGroup asserts it breached the bank's cyber defenses to obtain sensitive data, including KYC records, PAN and Aadhaar details, bank statements, credit reports, and internal corporate information.

The bank has repeatedly emphasized that its own internal systems remain unaffected and all banking services continue to operate normally. Following the initial reports, the bank's shares traded approximately 2 percent lower on the BSE. While the bank acknowledges the potential leak on the third-party platform, the full extent of the exposure and the volume of affected customers have not been established.

Salesforce stated it has not identified a vulnerability in its platform related to the issue, though it declined to comment on specific customer matters. The incident occurs amid a broader wave of cyberattacks targeting Indian financial institutions, including State Bank of India and ICICI Bank, following warnings from Prime Minister Narendra Modi regarding attempts to weaken the Indian economy through cyber warfare.