E-MagazineAU Small Finance Bank data breach row deepens, over 22 lakh customer account details allegedly put up for sale
AU Small Finance Bank is under scrutiny again as a threat actor has claimed to have stolen over 1.2 TB of data.
The threat actor has reportedly put the stolen data up for sale for $8,500 (around Rs 7.9 lakh).
The hacker claims to have accessed the bank's entire database, including customer accounts, personal details and financial records.
AU Small Finance Bank is under scrutiny again as a threat actor has claimed to have stolen over 1.2 TB of data and put it up for sale for $8,500 (around Rs 7.9 lakh). According to a post shared by ThreatMon on X, the hacker claims to have accessed the bank's entire database, including customer accounts, personal details and financial records. The alleged leak includes more than 22 lakh live customer accounts and over 19 lakh bank account numbers. However, the claims have not been independently verified. We have reached out to the bank for an official statement.
AU Small Finance Bank data breach: What has been leaked?
According to the threat actor's post on an underground forum, the stolen data reportedly contains more than 1 billion records. The alleged database includes sensitive customer information such as PAN and Aadhaar numbers, dates of birth, mobile numbers, email addresses and residential addresses.
The hacker also claims to have accessed nearly 39 lakh KYC identity records and over 22 lakh active customer account records. The alleged dataset also includes bank account numbers, loan details, credit reports, insurance records and transaction history.
Other files reportedly include signed loan agreements, scanned cheques and customer signatures. If these claims are true, the leak of such information can put affected customers at risk of identity theft, financial fraud and other cybercrimes.
The threat actor has also reportedly shared links to sample files hosted on file-sharing platforms, claiming they can be used to check the authenticity of the stolen data.
🚨 Threat Actor Claims Massive Breach of AU Small Finance Bank, Alleging 1.2 TB Data Leak A threat actor has posted a claim on an underground forum alleging a significant data breach at AU Small Finance Bank, one of India's leading small finance banks. The actor claims to have compromised the bank's full database and is offering the stolen data for sale for $8,500. The post directly contradicts the bank's official statement issued in late October 2026, which attributed the incident to a limited data leak involving a third-party Salesforce SaaS platform affecting only vehicle loan customers. The actor alleges that the bank's own core systems were breached, not just the external SaaS platform. According to the forum post, the stolen dataset totals 1.2 TB and contains over 1 billion records. The actor claims the bank is downplaying the severity of the incident to avoid regulatory scrutiny and customer panic. The alleged compromised data includes: - 3,846,888 complete KYC identity records containing PAN, Aadhaar numbers, dates of birth, mobile numbers, emails, full addresses, and family names - 2,282,619 live customer accounts - 1,917,657 exposed bank account numbers - 938,403,770 core banking transaction and servicing records - 30,266,393 credit bureau, CIBIL, and FICO risk dossiers - 72,241,539 loan book, collateral, sanction, and insurance records - 2,871,796 signed loan agreements, scanned cheques, and customer signatures AU Small Finance Bank, headquartered in Chennai, serves millions of customers across India with a focus on financial inclusion. The exposure of Aadhaar numbers and PAN details poses severe risks of identity theft and financial fraud for the affected individuals. The actor also provided links to sample files hosted on various file-sharing services to verify the authenticity of the dump. At the time of reporting, the alleged breach has not been independently verified. While the bank has acknowledged a security incident related to a third-party platform, the extent of the compromise claimed by the threat actor remains unconfirmed by independent security researchers or regulatory bodies.
— ThreatMon (@MonThreat) November 6, 2026
What did AU Small Finance Bank say about the earlier breach?
The latest claims come days after a hacking group identified as ScarlettGroup allegedly breached AU Small Finance Bank. The group had threatened to leak data allegedly stolen from the bank. The information reportedly included PAN and Aadhaar details, bank statements, credit reports, loan records and employee information.
At the time, AU Small Finance Bank said the incident involved a third-party software-as-a-service (SaaS) platform managed and hosted by Salesforce. The bank said that the platform contained limited information related to its vehicle loan customers.
However, the new allegations suggest that the attackers may have accessed a much larger set of banking records and internal data.
We will update the story once we receive AU Small Finance Bank's official statement.
Ayushi Jain Ayushi works as Chief Copy Editor at Digit, covering everything from breaking tech news to in-depth smartphone reviews. Prior to Digit, she was part of the editorial team at IANS.
View full profile