AU Small Finance Bank is investigating a potential data leak after hacking group ScarlettGroup claimed on the dark web that it accessed and stole limited customer and internal corporate records. The suspected information is linked to a Salesforce-hosted third-party platform used for storing limited vehicle-loan customer data. The bank says its systems are unaffected, while regulators and investigators assess whether any data exposure occurred.
Coverage focuses on what attackers claim and what the bank has confirmed. Some outlets describe the breach as involving “limited” data for vehicle-loan customers and note that details such as the number of customers and exact data types are not yet established. Others report that the hackers threatened to leak information and list types of purported data, including identity and KYC-related documents, loan files, and internal records.
Several reports also reference cybersecurity monitoring accounts and third-party reporting that the incident may be tied to a compromise of the vendor platform rather than AU’s core banking infrastructure. One outlet adds that the lender has cyber insurance coverage and has not yet informed the insurer, depending on findings from forensic investigations.
