In the case of AU Small Finance Bank, a hacking group called ScarlettGroup has claimed responsibility for breaching the bank's systems and threatened to leak sensitive customer information and internal corporate data. According to a post shared by Hackmanac, the group has threatened to expose data allegedly obtained from the bank.
The hackers claim to have accessed highly sensitive customer documents, including Know Your Customer (KYC) records, identity documents, credit reports, bank statements, loan applications and signed agreements. They have also claimed access to internal bank information, including employee details, login histories, insurance records and audit logs.
AU Small Finance Bank has informed NBT Tech Team that it is investigating a data security leak. According to the bank, the incident is connected to a Software-as-a-Service (SaaS) platform managed and hosted by Salesforce. The platform contains certain data related to the bank's vehicle loan customers.
Separately, electronics retailer Vijay Sales has also emerged as a target in an alleged cybersecurity breach. According to a tweet by Dark Web Informer, a user operating under the handle shinymontanna has offered to sell super administrator access to Vijay Sales on the dark web for approximately ,000 (around Rs 21 lakh).
The seller claims to possess records of more than 3 million company orders, information on 15,000 employees and billing records belonging to approximately 1.4 lakh vendors.
The alleged administrative access reportedly extends beyond customer information. According to the hacker's claims, the compromised access includes payment histories, bank transfer records, inventory information and financial reports. The hacker has also claimed the ability to make changes within these systems.
🚨Cyber Alert ‼️ 🇮🇳India - 𝗔𝗨 𝗦𝗺𝗮𝗹𝗹 𝗙𝗶𝗻𝗮𝗻𝗰𝗲 𝗕𝗮𝗻𝗸 The ScarlettGroup hacking group claims to have breached AU Small Finance Bank and threatened to leak sensitive customer and internal corporate data. According to the attackers, the compromised information includes KYC records, personal identification documents, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements, insurance records, CRM data, employee information, login histories, and audit logs. Threat actor: ScarlettGroup Sector: Financial / Insurance Data exposure (claimed): Not specified Data type: KYC records, identity documents, financial records, loan agreements, CRM records, employee data, audit logs Observed: Oct 29, 2026 Status: Pending verification ESIX©: 5.69 Full details and impact assessment on https://t.co/eB7qgxKFAa
— Hackmanac (@H4ckmanac) October 29, 2026
To support the claims, screenshots of the company's administrative dashboard have reportedly been posted online.
The two incidents have raised concerns about the potential consequences of cyberattacks targeting Indian companies. If personal documents, contact details and financial information belonging to customers are exposed through banks or retail businesses, cybercriminals could potentially misuse the information to carry out fraud, obtain loans using fake identities or commit banking-related financial crimes.
The claims involving AU Small Finance Bank and Vijay Sales highlight the potential risks associated with unauthorised access to corporate systems, particularly when sensitive customer, employee, vendor and financial records are involved. While AU Small Finance Bank has confirmed that it is investigating a data security leak linked to a Salesforce-hosted SaaS platform, the claims made by the hackers concerning both companies remain central to the emerging cybersecurity concerns.
About The Author
Comment List