AU Small Finance Bank Probes Potential Data Leak; Core Systems Safe
AU Small Finance Bank is investigating a potential data leak on a Salesforce SaaS platform. The bank says its core systems remain unaffected.
AU Small Finance Bank is currently conducting an investigation into a potential data leak involving a third-party software-as-a-service (SaaS) platform. The bank clarified that the platform in question is managed and hosted by Salesforce and contains limited information specifically related to its vehicle loan customers.
In an official statement provided to ANI, the lender emphasized that its internal banking systems have not been compromised. The bank reassured its clients that all banking services are operating normally and that the potential breach is isolated to the external SaaS environment.
Hacker Claims vs Bank's Clarification
The investigation follows alarming reports of a cybersecurity incident. A hacker group claimed to have breached the bank's defenses, threatening to leak a massive trove of sensitive internal and customer-related data. According to these claims, the breached information included:
- Customer Documents: KYC documents, PAN cards, and Aadhaar details.
- Financial Records: Bank statements, credit reports, and loan agreements/applications.
- Corporate Data: Employee records, CRM data, audit logs, and login histories.
However, it is important to note that these claims by the hacker group have not been independently verified. While the bank has acknowledged the investigation into the Salesforce-hosted platform, it has not confirmed that the specific categories of sensitive data mentioned by the hackers were actually compromised.
The Scope of the Incident
At this stage, several key details remain shrouded in mystery. The bank has not disclosed the exact extent of the potential data exposure, the specific number of vehicle loan customers who might be affected, or whether any of the leaked information has been misused by malicious actors.
By distinguishing between its own core banking systems and the third-party Salesforce platform, the bank is signaling that the primary infrastructure used for transactions and account management remains secure.
A Growing Trend of Banking Vulnerabilities
This incident occurs during a period of heightened anxiety regarding cybersecurity within India's financial sector. The vulnerability of customer data, especially when stored on third-party technology platforms, has come under intense scrutiny.
This follows a similar high-profile incident involving the State Bank of India (SBI) earlier this month. On October 21, SBI revealed that a preliminary analysis of roughly 3.75 lakh records suspected of being on the dark web had identified 3,897 customer records containing personally identifiable information (PII).
In the SBI case, the exposed data reportedly included names, residential addresses, registered mobile numbers, dates of birth, email addresses, and metadata associated with loan records. SBI had been alerted to this exposure on October 16 by CERT-In, the Defence Cyber Agency, and its Threat Intelligence Service Provider.
Together, these incidents highlight the critical challenge Indian banks face in securing data across an increasingly complex ecosystem of internal systems and external cloud service providers.