AU Small Finance Bank (AU SFB) is investigating a potential data leak involving a Salesforce-hosted software platform holding limited information on its vehicle loan customers, after a hacker group claimed to have accessed sensitive customer and internal records.

The Jaipur-headquartered lender confirmed the investigation, while maintaining that its own systems remain unaffected and all banking services are operating normally.

Separately, a threat actor has allegedly offered administrator access to electronics retailer Vijay Sales’ systems for $25,000. Neither the extent of the alleged access nor the extraction of any data has been independently confirmed.

The AU SFB investigation follows a post flagged by cybersecurity tracking account Hackmanac on X. A group calling itself ScarlettGroup claimed to have breached the lender’s records and threatened to publish the allegedly stolen information.

According to the group, the information includes KYC records, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements, and insurance records.

It also claimed to have accessed customer relationship management (CRM) data, employee information, and audit logs. Inc42 could not independently verify these claims.

“AU Small Finance Bank is investigating a potential data leak involving a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which holds limited data relating to our vehicle loan customers,” a bank spokesperson told ThePrint. “We reaffirm that the Bank’s own systems remain unaffected and all banking services are operating normally.”

The lender did not confirm whether the Salesforce-hosted platform was the source of the data the group claims to hold. It also did not disclose how many customers may have been affected.

Source link