AU Small Finance Bank probes possible data leak of 28.5 lakh loan customers

AU Small Finance Bank says vehicle loan customers onboarded via a third-party SaaS platform may have had data leaked. It has told RBI and CERT-In.

Padlock and toy car symbolising a vehicle loan data security investigation
AU Small Finance Bank is investigating a possible data leak on a vendor platform. Illustration: AI-generated.

Key points

  • AU Small Finance Bank says some vehicle loan customers onboarded through a third-party SaaS platform may have experienced data leakage.
  • The platform holds information of 28.5 lakh vehicle loan customers, collected when they took the loan.
  • The bank has brought in cybersecurity firms to examine the incident, alongside its own internal review.
  • The matter has been reported to the RBI and CERT-In; the bank says its other systems and services are unaffected.

What happened

AU Small Finance Bank has said some of its vehicle loan customers may have had their data leaked. According to a report in BusinessLine on 3 November 2026, the bank made the disclosure in a regulatory filing.

The affected customers were onboarded through a third-party Software-as-a-Service (SaaS) platform, meaning software run online by an outside company. The bank says this platform is hosted and managed by a global third-party vendor and holds customer information collected when the loan was set up.

The bank said 28.5 lakh vehicle loan customers were onboarded through the platform. Its findings so far are preliminary, and the number of customers actually affected has not been stated.

AU Small Finance Bank says some vehicle loan customers onboarded through a third-party SaaS platform may have experienced dat

What the bank is doing

To find out what kind of leak this was and how far it reaches, the bank is examining the incident both within its own teams and with outside cybersecurity firms.

It has reported the matter to regulators, including the Reserve Bank of India and CERT-In (India’s national cyber security agency), as applicable rules require. It said it is monitoring the situation closely.

The filing says the bank’s other systems are unaffected and all services are operating normally. It added that the incident does not affect its business operations, financial performance or business continuity.

What it means for you

If you took a vehicle loan from AU Small Finance Bank, the bank has not yet said which customers, or what kinds of data, were affected. Details will depend on the forensic findings.

Day-to-day banking with the bank is described as running normally. If you want to check your own loan, an EMI calculator can help you confirm your repayment figures against your statements, and you can use the bank’s official channels for any updates on the incident.

Background

Banks often use outside software platforms to collect customer details during loan onboarding. Data held on such platforms is managed by the vendor, which is why the bank is investigating with outside cybersecurity firms. For more on this story, see our earlier coverage of the AU Small Finance Bank probe.

What it means for you

Vehicle loan customers of AU Small Finance Bank may have had data exposed through a vendor platform, but the scope is not yet known. The bank says its other systems and services are unaffected. Further details will depend on the forensic investigation.

EMI Calculator

Frequently asked questions

What has AU Small Finance Bank reported?

The bank said in a regulatory filing that some vehicle loan customers onboarded through a third-party SaaS platform may have experienced data leakage, based on preliminary findings.

How many customers are on the platform?

28.5 lakh vehicle loan customers were onboarded through the platform. The bank has not said how many were actually affected.

Are the bank's services disrupted?

No. The bank says its other systems are unaffected, all services are operating normally and there is no impact on business operations or financial performance.

Has the incident been reported to authorities?

Yes. The bank said it has reported the matter to regulators, including the RBI and CERT-In.

Sources

  1. AU Small Finance Bank flags possible data leak involving vehicle loan customers — BusinessLine — Money & Banking

Understand the basics

More in the Knowledge Base →

This article is for information only and is not investment, tax or legal advice. Figures are from the sources linked above as of the publish or update time. Please verify with official sources or a qualified adviser before making financial decisions.