AU Small Finance Bank, an Indian lender, told MediaNama it is investigating a potential data leak. The bank says the platform is managed and hosted by Salesforce and holds limited data on its vehicle loan customers. It has only said it is investigating, not that a breach happened. A hacking group posted a claim on the dark web, which the threat-tracking account Hackmanac first reported on X. The bank said its own systems are unaffected and banking services run normally.
The group's listing claims the data includes Aadhaar and PAN ID details, credit reports and signed loan agreements. It also names employee directories, permissions and audit logs, all described as allegedly compromised. MediaNama could not verify that the group holds any AU data. No samples have been released. At the time of MediaNama's writing, the listing was marked "negotiation" with a countdown of five days and 17 hours. The bank has not addressed the employee claims.
Analysis: a cloud customer-records system keeps a bank's loan and ID files on the vendor's platform, reached through logins, admin roles and API links. So "our systems are unaffected" answers a question nobody asked. What matters is what data sits on that platform and who can reach it. The sources do not say how any breach happened.