AU Small Finance Bank Hit By Alleged Cyberattack; Hackers Claim PAN, Aadhaar Data Stolen

Alleged cyberattack on AU Small Finance Bank: Hackers claim stolen PAN, Aadhaar data

A hacking group known as ScarlettGroup has alleged that they breached AU Small Finance Bank, stealing sensitive customer data and internal records. The group claims to have stolen PAN, Aadhaar details, KYC records, bank statements, credit reports and loan files. Threatening to publish the stolen information online, ScarlettGroup has not yet provided any evidence to support their claims.

If the allegations prove true, the exposure could put customers at risk of identity theft, financial fraud and other scams targeting affected bank account holders.

The cybersecurity monitoring account @H4ckmanac first reported the breach on X. According to the account, hackers had accessed KYC records and personal identification documents of customers, including PAN and Aadhaar details. Beyond basic identification information, the alleged data breach also includes credit reports, bank statements, loan applications and signed agreements, as well as insurance-related records and customer relationship management (CRM) data.

ScarlettGroup also claims to have obtained internal employee details, login histories, and audit logs.

Though the bank has not yet acknowledged the incident, the authenticity of the data and the extent of the compromise remain unverified. If genuine, the data breach could prove disastrous for customers, as documents such as PAN, Aadhaar, bank statements and signed loan papers can be used for impersonation and fraud. Consequently, customers have been advised to remain vigilant against suspicious calls, messages, emails, and to refrain from sharing personal details such as PAN, Aadhaar, banking passwords, OTPs or other sensitive information with unknown parties. Additionally, customers are urged to monitor their accounts for any unusual activity.