What happened
AU Small Finance Bank said on Friday, 30 October 2026, that it is examining a possible leak of data from a software-as-a-service (SaaS) platform that Salesforce manages and hosts. SaaS means software that a company uses over the internet rather than running on its own servers. The platform stores limited information about the bank’s vehicle loan customers.
In an emailed statement, a bank spokesperson said its internal systems have not been affected and that all banking services continue to run normally.
According to the Times of India, the matter came to light after HackRisk.io, a platform that monitors cyber-attacks, posted about an alleged breach on X on 29 October. The paper reported that a hacking group calling itself ScarlettGroup said it had got into customer and corporate data and threatened to publish it. As reported, the hackers’ claims include KYC records. These claims are unproven. KYC (know your customer) records are the identity documents lenders collect to verify customers.
The Economic Times reported that Salesforce has said it found no vulnerability at its end. The bank’s shares were down 1.7% at ₹865.7 at the time of the Reuters report carried by BusinessLine.
What it means for you
If you have a vehicle loan with AU Small Finance Bank, the bank has not said which customers or which data fields, if any, were affected. Its statement says only that the platform holds limited data. Your accounts and the bank’s core banking services are reported to be working normally.
Until the investigation concludes, it is sensible to watch for official communication from the bank and be careful with unexpected calls, messages or links that mention your loan or identity documents.
Background
The incident comes as India’s banking regulator pushes lenders to strengthen cybersecurity frameworks, according to Reuters. Last week, State Bank of India reported a cyberattack in which 3,897 customer records containing personally identifiable information were leaked on the dark web, Reuters said. The Economic Times also noted that Prime Minister Narendra Modi recently warned of growing cyberattack threats to the economy.
For more on the documents lenders collect, see our explainer on what is KYC.
