After SBI, Data Leak in AU Small Finance Bank

Cyber threat group ScarlettGroup has claimed an attack involving the AU Small Finance Bank and threatened to disclose sensitive information. However, the claim has not been independently verified, and the available reports do not establish whether customer data was actually stolen or exposed.

ScarlettGroup claimed on a dark web leak site that the data includes customer KYC records, PAN and Aadhaar details, bank statements, credit reports, CIBIL scores, loan agreements, CRM data, and employee audit logs.

The incident came to light on October 29, 2026, when the cybersecurity platform Hackmanac flagged that the bank had been indexed on a dark web leak site.

AU Small Finance Bank has started investigating the potential data leak involving a software-as-a-service (SaaS) platform that holds limited information related to its vehicle-loan customers, according to reports published on October 30, 2026.

Also Read: FM Sitharaman replies to Rahul Gandhi’s Letter related to IDBI Bank Privatisation

The bank stated the potential leak involves a third-party software-as-a-service (SaaS) platform managed and hosted by Salesforce, which held limited data related to vehicle loan customers.

AU Small Finance Bank clarified that its core internal systems remain unaffected and all normal banking operations are continuing as usual. Following the reports, AU Small Finance Bank shares traded roughly 1.6% to 2% lower on the market.

This attack highlights an ongoing wave of third-party vendor targeting in India’s banking sector. It follows a cyber incident at the State Bank of India (SBI) just a week prior that exposed 3,897 records on the dark web, prompting intense regulatory scrutiny from the Reserve Bank of India (RBI).

Also Read: Customer downloaded fake app for KYC Updation, SBI ordered to pay compensation