AU Small Finance Bank breach reported, hackers threaten to leak customer records

Customer records of AU Small Finance Bank have allegedly been compromised. The anonymous hacker group, with the alias ScarlettGroup, has claimed that it breached AU Small Finance Bank and obtained sensitive customer information and internal corporate records. The group has threatened to leak this data online, which it says includes Aadhaar numbers, KYC details, loan documents, and more.The breach was first reported on X by cybersecurity account H4ckmanac. The hackers made the claim about breaching AU Small Finance Bank on their dark web website. The group claims that PAN and Aadhaar details, CIBIL scores and other credit reports are among the records in its possession.India Today Tech could not independently verify the group’s claims. It is also unclear how many users may be affected by this breach. It has also not specified the total size of the alleged dataset. The suspected breach was reported on X. AU Small Finance Bank has not addressed the incident yet. Hackers claim they will leak data in 6 daysOn the dark web, the hackers have placed a countdown that says, “Negotiation deadline.” At the time of writing, the countdown has dropped below 6 days. It is likely that the group wants to get ransom from AU Small Finance Bank. However, it has not disclosed its demands on the webpage. The post also has blurred sample documents. Shots of the dark web post regarding the hack. (Photo: India Today) Going by the post, the group may have obtained personal details as well as financial records. This includes, “bank statements, loan applications, approvals, collateral, and insurance,” The hackers also claim to have access to staff documents, such as “employee directory, account teams, roles, login history, IP addresses, and audit logs.” If these claims are accurate, it could allow any bad actor to gain access to sensitive information of AU Small Finance Bank and its users. This could potentially lead to a rise in identity theft or attempts to scam users.We cannot say whether the bank has actually been breached until we get an official word from AU Small Finance Bank. Earlier this month, the State Bank of India (SBI) confirmed that a data breach had exposed nearly 3,900 customer records.- Ends