AU Small Finance Bank is investigating a potential data leak affecting vehicle loan customer information hosted on Salesforce. At the same time, reports surfaced that internal systems for electronics retailer Vijay Sales are openly listed for sale on cybercrime forums. The dual breaches underscore how even India's traditional businesses and cloud-reliant platforms remain targets.
How We Got Here
The AU Small Finance Bank probe began after researcher P. Sai Satish flagged the Salesforce platform's vulnerability. For Vijay Sales, the alleged breach came to light after cybersecurity researcher Resecurity identified their systems on a dark web marketplace.
The Numbers
- The AU Bank leak involves "limited vehicle loan customer information" stored on a Salesforce Sales Cloud platform.
- AU Bank stated the platform was "limited purpose" and "isolated from core banking systems."
- The alleged Vijay Sales breach includes administrator panels, point-of-sale (POS) systems, and financial/customer data.
- Resecurity claims the Vijay Sales data is being sold on a dark web forum since late 2023.
- Salesforce is reportedly assisting AU Bank with its investigation.
What Happens Next
🇮🇳 Why This Matters for India
For SaaS founders building solutions for Indian enterprises, these incidents highlight the non-negotiable need for robust third-party security audits in the financial and retail sectors.
The Take
The AU Bank breach, even on a Salesforce platform, confirms that third-party integrations are the weakest link for large Indian enterprises, regardless of the vendor name. Founders building enterprise SaaS in India need to treat vendor security as a core product feature, not just a compliance checkbox.
Source:
Gadgets 360 ↗