AU Small Finance Bank is investigating a data leak from a Salesforce-hosted platform after hackers claimed access to Aadhaar and PAN details. This immediately creates tension with the bank's claim that only "limited data" relating to vehicle loan customers was affected. The alleged breach could expose sensitive financial and identity records for thousands of customers.
How We Got Here
This probe began after cyber threat intelligence account Hackmanac first reported a dark web claim on X. The hacking group's dark web listing currently shows a live countdown for negotiations, detailing claimed customer KYC and employee records.
The Numbers
- The bank stated the breach is limited to a Salesforce-managed SaaS platform, explicitly clarifying its own core systems are unaffected.
- Hackers claim to possess full customer KYC data, including Aadhaar, PAN details, photos, and signatures.
- The alleged leak extends to CIBIL reports, FICO scores, bank statements, and signed loan agreements.
- The dark web listing also specifies "Staff and Internal Identity" records like employee directories and login histories.
- MediaNama could not independently verify the hacker's claims, as no data samples have been publicly released by the group.
What Happens Next
🇮🇳 Why This Matters for India
For Bangalore's fintech founders and Mumbai's product managers building with third-party SaaS, this incident highlights critical vendor security blind spots in the financial services sector.
The Take
The bank's claim of "unaffected internal systems" completely misses the point; customer trust hinges on the security of all data, regardless of where it's hosted. This incident highlights the massive third-party vendor risk inherent in using SaaS platforms for sensitive customer data, a blind spot for many Indian financial institutions.
Source:
MediaNama ↗