Salesforce has denied any vulnerability in its platform following a reported data breach at AU Small Finance Bank. The bank, however, has acknowledged a potential data leak involving its Salesforce platform, which contains limited information related to vehicle finance customers. The hacking group ScarlettGroup has claimed responsibility, alleging access to sensitive customer records and internal corporate data, including KYC records, PAN and Aadhaar details, and other financial documents.
In a statement, Salesforce said it does not comment on specific customer issues but confirmed that its teams are engaged to support AU Small Finance Bank as needed. The company stated that based on currently available information, no vulnerability in its platform related to the breach has been identified.
AU Small Finance Bank reassured stakeholders that its core systems remain unaffected and all services are operating normally. The bank emphasized that the matter is under investigation, though it did not provide further details on the extent of the alleged breach or the steps being taken to address it.
The hacking group ScarlettGroup has reportedly threatened to release the allegedly compromised data, which includes credit reports, bank statements, loan applications, and internal audit logs. The investigation into the breach is ongoing, with no immediate resolution or confirmation of the claims made by the hackers.