AU Small Finance Bank has reportedly faced a cyberattack, with a hacking group claiming to have accessed sensitive customer and internal company information. The claim was shared by cybersecurity monitoring account @H4ckmanac on X. The attackers, identified as ScarlettGroup, have threatened to leak the allegedly stolen data. The information is said to include customersโ PAN and Aadhaar details, bank statements, credit reports and loan records. The hackers have also claimed to have accessed employee data and internal records. However, the claims are yet to be verified.
According to the post shared by @H4ckmanac, the attackers claim to have accessed sensitive information belonging to AU Small Finance Bank customers. This includes KYC records and personal identification documents. The data reportedly compromised also includes PAN and Aadhaar details.
The leaked data exposure goes beyond basic personal information. It reportedly includes credit reports, bank statements, loan applications and signed agreements. Insurance-related records and customer relationship management (CRM) data are also mentioned. The list of compromised information also mentions employee details, login histories and audit logs.
If confirmed, the incident may put sensitive financial and personal information at risk. This type of information can potentially be misused for identity theft, financial fraud and other scams.
๐จCyber Alert โผ๏ธ ๐ฎ๐ณIndia โ ๐๐จ ๐ฆ๐บ๐ฎ๐น๐น ๐๐ถ๐ป๐ฎ๐ป๐ฐ๐ฒ ๐๐ฎ๐ป๐ธ The ScarlettGroup hacking group claims to have breached AU Small Finance Bank and threatened to leak sensitive customer and internal corporate data. According to the attackers, the compromised information includes KYC records, personal identification documents, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements, insurance records, CRM data, employee information, login histories, and audit logs. Threat actor: ScarlettGroup Sector: Financial / Insurance Data exposure (claimed): Not specified Data type: KYC records, identity documents, financial records, loan agreements, CRM records, employee data, audit logs Observed: Oct 29, 2026 Status: Pending verification ESIXยฉ: 5.69 Full details and impact assessment on https://t.co/eB7qgxKFAa
โ Hackmanac (@H4ckmanac) October 29, 2026
The ScarlettGroup hacking group has reportedly threatened to publish the information it claims to have obtained from the bank. The bank is yet to acknowledge the breach.
Customers should remain alert to suspicious calls, messages and emails. They should avoid sharing their PAN, Aadhaar, banking passwords, OTPs or other personal details with unknown sources. They should also watch their bank accounts for unusual activity.