AU Bank probes potential data leak

AU Small Finance Bank probes alleged data leak involving a Salesforce-hosted platform holding limited vehicle loan customer information, while saying its core systems remain unaffected

MUMBAI: AU Small Finance Bank is investigating a potential data leak involving a Salesforce-hosted software platform that holds limited information relating to its vehicle loan customers, after a cyber threat intelligence platform flagged claims by a hacking group that it had breached the lender’s systems. The bank said the incident involved a software-as-a-service (SaaS) platform managed and hosted by Salesforce.“We reaffirm that the Bank’s own systems remain unaffected and all banking services are operating normally,” a bank spokesperson said. HackRisk.io, a threat intelligence and cyber-attack monitoring platform, flagged the alleged breach in a post on X on Oct 29. The ScarlettGroup hacking group claimed to have accessed sensitive customer and internal corporate data and threatened to release it. According to hackers’ claims, the compromised information includes KYC records.