AU Small Finance Bank Investigates Potential Vehicle Loan Data Breach Involving Salesforce Platform

NEW DELHI: AU Small Finance Bank (AUSFB) is currently investigating a potential data leak involving a software-as-a-service (SaaS) platform managed and hosted by Salesforce. The platform holds limited data relating to the bank's vehicle loan customers.

According to the bank, the breach of its vehicle loan data systems occurred on October 30, 2026. In an official statement, AU Small Finance Bank reaffirmed that its own internal systems remain unaffected and that all banking services are continuing to operate normally.

The incident came to light following a post on X by cyber threat intelligence platform Hackrisk. The post identified a threat actor known as Scarlett Group, which is claiming to have breached the bank's systems. The actor alleges that vulnerable data types include KYC records, identity documents, financial records, loan agreements, CRM records, employee data, and audit logs.

However, a person with knowledge of the matter stated that the issue was under investigation across all verticals, even though only the Wheels vertical may have experienced potential breaches. Furthermore, the source noted that claims regarding KYC data vulnerability remain unverified and unvalidated, while reiterating that the core banking system is secure.

"This incident highlights the critical importance of vendor risk management in modern banking operations. Even when a financial institution's core systems are secure, third-party SaaS integrations can present potential vulnerabilities. For businesses relying on external platforms, robust monitoring and rapid incident response are essential to maintain customer trust and operational stability." — Dr. Shishir Gupta, Founder & CEO, StartupLanes