The lender says its core systems and banking services are unaffected as it investigates a possible exposure of limited vehicle-loan customer data on a third-party platform.
AU Small Finance Bank is investigating a possible breach involving limited customer data tied to its vehicle-loan business, after the information was found on a third-party software platform run by Salesforce. The bank has said its own systems were not affected and that normal banking operations are continuing, but it has not disclosed how much data may have been exposed or how many customers could be involved. According to The Economic Times and ETBFSI, the episode appears to centre on a platform outside the lender’s core banking infrastructure, which narrows the immediate scope even as the investigation continues.
The lender’s disclosure suggests the issue may have originated at a service provider rather than inside AU Small Finance Bank’s internal network. That distinction matters because modern banks increasingly rely on cloud-based vendors for customer-facing and back-office functions, which can create exposure even when core systems remain secure. Business Standard, Moneycontrol and ThePrint reported that the company has so far stopped short of confirming whether the alleged breach involved actual theft of data, how the platform may have been accessed, or whether any financial records were compromised.
Attention has also turned to the possible contents of the data set after reports that a hacker group claimed responsibility for the incident. The Tribune, citing ANI, and other outlets reported allegations that the material could include identity documents, loan records, credit reports, bank statements and employee information, but those claims have not been independently verified by the bank. AU Small Finance Bank has not confirmed the source of the leak, and the public record at this stage remains limited to an ongoing probe and the lender’s assurance that service has not been interrupted.
Financially, the hit may prove modest. People familiar with the matter told The Economic Times that AU Small Finance Bank has a cyber-insurance cover of ₹100 crore from New India Assurance, which could help offset losses if the incident leads to remediation costs or liabilities. Even so, the newspaper noted that the eventual impact will depend on the findings of the forensic review, the extent of any confirmed exposure and whether claims need to be made. For now, the bank’s priority is likely to be establishing exactly what happened, whether any customers were affected and how the third-party platform was compromised.
Disclaimer: This article is intended to inform and educate, not to recommend or endorse any financial product, investment or strategy. Please consider your own financial circumstances and seek professional advice where appropriate before making financial decisions.
