← AU Small Finance Bank

2026 AU Small Finance Bank — forum dump claim; 1.2 TB / 1B records (unverified)

2026 Unknown records affected Share on X

Data compromised

Actor marketing (unverified): 1.2 TB / 1B+ records including ~3.85M KYC identities (PAN, Aadhaar, DOB, mobile, email, address), ~2.28M live accounts, ~1.92M account numbers, ~938M core-banking records, credit-bureau dossiers, loan-book files, scanned agreements and signatures. Bank: possible leak of some vehicle-loan customers from the SaaS platform (~28.5 lakh onboarded through it; leak census unpublished). recordsAffected 0.

Technical writeup

Catalogued as unverified actor claim. Exchange clarification 2 Nov 2026: aware 29 Oct; Salesforce-hosted vehicle-loan onboarding SaaS; some of ~28.5 lakh customers may have leaked; core systems unaffected; RBI and CERT-In notified. Forum post contradicts that and alleges a full core-database take. Samples not independently verified at indexing. companyConfirmed false; recordsAffected 0.

Root cause

Unverified underground-forum sale listing. Actor claims a core-system breach and a 1.2 TB dump for $8,500. The bank has separately confirmed a potential leak on a third-party Salesforce SaaS used to onboard vehicle-loan customers, and says its own systems are unaffected. Salesforce says it has not identified a platform vulnerability. How any access was obtained is unpublished.

References

Breaches you may like