AU Small Finance Bank investigates data breach claims; Vijay Sales system access allegedly for sale

AU Small Finance Bank (AU SFB) has initiated an investigation into a potential data leak linked to a Salesforce-hosted platform used for managing vehicle loan customers. The investigation follows claims by a group identifying as ScarlettGroup, which alleged unauthorized access to sensitive records including KYC documentation, bank statements, and loan applications. The lender stated that while it is investigating the matter, its own internal banking systems remain secure and operational.

In a separate incident, an actor on the dark web has allegedly listed super administrator access to the internal systems of electronics retailer Vijay Sales for $25,000. The listing purportedly includes access to over 3 million order records, employee information, and vendor billing data. As of now, Vijay Sales has not responded to inquiries regarding the legitimacy of these claims or confirmed if any data has been compromised.

These events add to a recent series of cybersecurity incidents in India, highlighting ongoing risks within digital supply chains and SaaS integration. Earlier this month, the State Bank of India (SBI) reported the exposure of thousands of customer records, and firms like eMudhra have faced security-related operational shifts. Industry experts note that the increased reliance on third-party digital infrastructure continues to present significant attack vectors for corporate entities.

The validity of the claims against both companies remains unverified. Investigators have yet to confirm the extent of the alleged access in either case, leaving the impact on customers and corporate data currently undetermined.