AU Small Finance Bank data compromised, hackers allegedly steal PAN, Aadhaar and other sensitive customer data
Follow UsAU Small Finance Bank has reportedly faced a cyberattack.
The attackers, identified as ScarlettGroup, have threatened to leak the allegedly stolen data.
The leaked data is said to include customers' PAN and Aadhaar details, bank statements and more.
AU Small Finance Bank has reportedly faced a cyberattack, with a hacking group claiming to have accessed sensitive customer and internal company information. The claim was shared by cybersecurity monitoring account @H4ckmanac on X. The attackers, identified as ScarlettGroup, have threatened to leak the allegedly stolen data. The information is said to include customers’ PAN and Aadhaar details, bank statements, credit reports and loan records. The hackers have also claimed to have accessed employee data and internal records. However, the claims are yet to be verified.
SurveyAU Small Finance Bank data breach: What data has the hacking group allegedly stolen?
According to the post shared by @H4ckmanac, the attackers claim to have accessed sensitive information belonging to AU Small Finance Bank customers. This includes KYC records and personal identification documents. The data reportedly compromised also includes PAN and Aadhaar details.
The leaked data exposure goes beyond basic personal information. It reportedly includes credit reports, bank statements, loan applications and signed agreements. Insurance-related records and customer relationship management (CRM) data are also mentioned. The list of compromised information also mentions employee details, login histories and audit logs.
If confirmed, the incident may put sensitive financial and personal information at risk. This type of information can potentially be misused for identity theft, financial fraud and other scams.
🚨Cyber Alert ‼️ 🇮🇳India – 𝗔𝗨 𝗦𝗺𝗮𝗹𝗹 𝗙𝗶𝗻𝗮𝗻𝗰𝗲 𝗕𝗮𝗻𝗸 The ScarlettGroup hacking group claims to have breached AU Small Finance Bank and threatened to leak sensitive customer and internal corporate data. According to the attackers, the compromised information includes KYC records, personal identification documents, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements, insurance records, CRM data, employee information, login histories, and audit logs. Threat actor: ScarlettGroup Sector: Financial / Insurance Data exposure (claimed): Not specified Data type: KYC records, identity documents, financial records, loan agreements, CRM records, employee data, audit logs Observed: Oct 29, 2026 Status: Pending verification ESIX©: 5.69 Full details and impact assessment on https://t.co/eB7qgxKFAa
— Hackmanac (@H4ckmanac) October 29, 2026
Hackers threaten to leak the allegedly stolen data
The ScarlettGroup hacking group has reportedly threatened to publish the information it claims to have obtained from the bank. The bank is yet to acknowledge the breach.
Customers should remain alert to suspicious calls, messages and emails. They should avoid sharing their PAN, Aadhaar, banking passwords, OTPs or other personal details with unknown sources. They should also watch their bank accounts for unusual activity.
