AU Small Finance Bank Probes Potential Data Breach, Vijay Sales Access Offered

AU Small Finance Bank is investigating a potential data leak involving a third-party Salesforce platform used for vehicle loan customer information. The Jaipur-based lender stated its internal systems remain secure and operational while it assesses claims made by a hacking group. Simultaneously, a separate threat actor is reportedly offering administrator access to electronics retailer Vijay Sales for $25,000.

The Initial Allegation

The cybersecurity tracking account Hackmanac flagged a post on X from a group identifying itself as ScarlettGroup. The group claimed to have breached records belonging to the bank, threatening to release sensitive information. The alleged data includes KYC documents, PAN and Aadhaar details, credit reports, bank statements, and loan agreements. The group further asserted it accessed customer relationship management data, employee information, and audit logs.

Bank Response

A spokesperson for AU Small Finance Bank confirmed the investigation into the incident. The bank stated the issue involves a software-as-a-service platform hosted by Salesforce that contains limited data regarding vehicle loan customers. The lender did not specify how many individuals might be impacted or confirm if the Salesforce platform was the confirmed source of the data. The bank emphasized that its core infrastructure was not affected by the incident.

Salesforce Partnership

AU Small Finance Bank entered a partnership with Salesforce in 2024 to digitize the onboarding process for vehicle loan customers. While Salesforce customers have previously faced security incidents involving third-party application connections, there is no verified evidence linking this specific event to broader campaigns or indicating a compromise of Salesforce’s core platform.