ScarlettGroup claimed a data breach at AU Small Finance Bank, alleging access to sensitive customer information. The bank said its systems remain unaffected, noting a potential leak only at its Salesforce platform. "The Bank's systems remain unaffected, and all services are operating normally," the bank said. Shares fell 1.19% today.

A hacking group identified as ScarlettGroup has claimed to have breached AU Small Finance Bank, alleging that it accessed sensitive customer information and internal corporate data.

According to information published on HackRisk, the group has threatened to leak the allegedly compromised data. The claimed exposure reportedly includes customers' Know Your Customer (KYC) records, Permanent Account Number (PAN) and Aadhaar details.

The group has also allegedly gained access to credit reports, bank statements, loan applications and signed agreements. Other data that may have been compromised reportedly includes insurance records, customer relationship management (CRM) data, employee information and internal audit logs.

Responding to the alleged breach, AU Small Finance Bank said there was a possibility of data leakage at its Salesforce platform, a software-as-a-service (SaaS) system managed and hosted by Salesforce.

The bank said the platform contains limited data relating to its vehicle finance customers.

"AU Small Finance Bank would like to update on potential data leakage at their Salesforce platform, SaaS system managed and hosted by Salesforce, which has limited data of wheels customers. The matter is under investigation. We would like to re-affirm to all stakeholders that the Bank's systems remain unaffected, and all services are operating normally," the bank said in a statement.

The bank said the matter was under investigation and reiterated that its systems remained unaffected and all services were operating normally.

AU Small Finance Bankis investigating the alleged breach, and its official statement on the matter is awaited.

Shares of AU Small Finance Bank were trading at ₹869 apiece, down ₹10.50 or 1.19% from the previous close of ₹879.50. The stock opened at ₹879.50 and touched an intraday high of ₹879.50 and a low of ₹860.45.

At this stage, there is no independent confirmation of the extent of the alleged data exposure or whether customer information has been accessed or leaked.