Incidents
AU Small Finance Bank Hit by Claim of 1.2 TB Data Theft and $8,500 Sale
By News Desk ·
Key takeaways
- A threat actor claims to have stolen over 1.2 TB of data from AU Small Finance Bank and offered it for sale at $8,500.
- The alleged dataset includes more than 22 lakh live customer accounts and over 19 lakh bank account numbers.
- AU Small Finance Bank earlier attributed a breach to a third-party Salesforce SaaS platform affecting only vehicle loan customers.
A threat actor claims to have stolen more than 1.2 TB of data from AU Small Finance Bank and put it up for sale at $8,500, according to Digit. The claims have not been independently verified. AU Small Finance Bank is India's largest small finance bank, serving more than 25 million retail, SME, rural, NRI and premium customers.
What the Threat Actor Claims Was Stolen
According to a post shared by ThreatMon on X, the hacker claims to have accessed the bank's entire database, including customer accounts, personal details and financial records. The alleged leak includes more than 22 lakh live customer accounts and over 19 lakh bank account numbers. The threat actor's post on an underground forum says the stolen data contains more than 1 billion records, including PAN and Aadhaar numbers, dates of birth, mobile numbers, email addresses and residential addresses. The actor also claims nearly 39 lakh KYC identity records and over 22 lakh active customer account records, plus loan details, credit reports, insurance records and transaction history. Other files reportedly include signed loan agreements, scanned cheques and customer signatures. The actor shared links to sample files on file-sharing platforms to support the authenticity claim.
The post contradicts the bank's official statement in late October 2026, which attributed the incident to a limited data leak involving a third-party Salesforce SaaS platform affecting only vehicle loan customers. The actor alleges the bank's own core systems were breached, not just the external SaaS platform, and claims the bank is downplaying the severity to avoid regulatory scrutiny and customer panic. Salesforce is the SaaS provider the bank named in that earlier statement.
AU Small Finance Bank's Scale and Systems
According to akta.pro company records, AU Small Finance Bank serves more than 25 million customers through 2,790+ banking touchpoints across India. The bank deployed its first AI-native Loan Origination System built on Dailoqa's Broccoli platform in partnership with AWS in May 2026, automating end-to-end loan processing across commercial banking and mortgage workflows. In 2026 it received RBI in-principle approval to transition from a Small Finance Bank into a Universal Bank, the first SFB to receive such approval in over a decade.
Earlier AU Small Finance Bank Developments
On September 16, 2026, AU Small Finance Bank said its vehicle loan portfolio crossed ₹50,000 crore in assets under management in August 2026, CNBC TV18 reported. On September 29, 2026, the bank announced its Microfinance & Financial Inclusion Business network crossed 1,000 branches, serving over 20 lakh customers across 17 states and 1 Union Territory, Fortune India reported. On October 12, 2026, the bank said it would host an analyst call on October 24, 2026, to present Q2FY27 and H1FY27 results for the period ending September 30, 2026, ScanX reported.
What Comes Next for AU Small Finance Bank
Digit said it has reached out to AU Small Finance Bank for an official statement and will update the story once a response is received. The alleged breach has not been independently verified by security researchers or regulatory bodies.