AU SFB probes potential vehicle loan data leak; says core systems unaffected

SENSEX 74,459.53

+ 308.49

NIFTY 23,053.10

+ 116.35

CRUDEOIL 9,915.00

+ 206.00

GOLD 138,475.00

 -4,121.00

SILVER 178,944.00

 -10,509.00

SENSEX 74,459.53

+ 308.49

NIFTY 23,053.10

+ 116.35

NIFTY 23,053.10

+ 116.35

CRUDEOIL 9,915.00

+ 206.00

CRUDEOIL 9,915.00

+ 206.00

GOLD 138,475.00

 -4,121.00

'; } document.getElementById("lgdv").innerHTML = htmlElements; } function numberformat(i) { return Number(parseFloat(i).toFixed(2)).toLocaleString('en', { minimumFractionDigits: 2 }) } async function gatherResponse(response) { const { headers } = response; const contentType = headers.get('content-type') || ''; if (contentType.includes('application/json')) { return await response.json() } return response.text(); } function getWidth() { if (Math.max(document.body.scrollWidth,document.documentElement.scrollWidth,document.body.offsetWidth,document.documentElement.offsetWidth,document.documentElement.clientWidth) > 991) { document.getElementById("mob").style.display = "none"; document.getElementById("lgdv").style.display = "block"; } else { document.getElementById("mob").style.display = "block"; document.getElementById("lgdv").style.display = "none"; } } getWidth(); THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.

A cyber threat intelligence platform has reported breach claims, but the bank says allegations of KYC data exposure remain unverified

By Ashokamithran T

Updated - October 31, 2026 at 02:49 PM. | Mumbai

AU Small Finance Bank is investigating a potential data leak involving a Salesforce-managed platform used for vehicle loan customer data.

AU Small Finance Bank (AUSFB )’s vehicle loan data systems were breached on October 30 2026. Salesforce managed the platform.

“AU Small Finance Bank is investigating a potential data leak involving a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which holds limited data relating to our vehicle loan customers.

We reaffirm that the Bank’s own systems remain unaffected and all banking services are operating normally,” the bank said in a statement.

Cyber threat group claims breach; data exposure unverified

According to a post on X by Hackrisk, a cyber threat intelligence platform, Scarlett Group is the threat actor claiming to have breached AU SFB’s systems, and vulnerable data types include KYC Records, identity documents, financial records, loan agreements, CRM records, employee data, and audit logs.

The issue was under investigation across all verticals, even though only the Wheels vertical may have had “potential breaches,” said a person with knowledge of the matter. Further, the person said that “claims” of KYC data vulnerability are “unverified and unvalidated,” while assuring that the core banking system is safe.

“We have to rethink the whole cybersecurity strategy both from a regulatory and technical perspective. We should be looking at data production beyond breach, and we should look at, you know, technologies, new set of technologies, which can control data, control AI with stronger cryptographic and statistical methods so that data can be protected even beyond breach,” said Abhilash Soundararajan, Founder & CEO, PrivaSapien.

Published on October 30, 2026

THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS. THIS AD SUPPORTS OUR JOURNALISM. SUBSCRIBE FOR MINIMAL ADS.Sign into Unlock benefits!

• Access 10 free stories per month
• Get notified by email for early preview to new features, discounts & offers