Small Finance Bank

AU SFB data leak: Salesforce says no platform vulnerability identified

Salesforce said it has not identified any vulnerability at its end with regard to the alleged data leak at its customer AU Small Finance Bank.


Global tech major Salesforce on Saturday said it has not identified any vulnerability at its end with regard to the alleged data leak at its customer AU Small Finance Bank.

A hacking group identified as ScarlettGroup has claimed to have breached the bank’s cyber defences and accessed KYC records, identity documents and other important data. 

In a statement, Salesforce said: "Based on currently available information, we have not identified a vulnerability in the Salesforce platform related to this issue." 

The statement comes a day after AU Small Finance Bank reported that it has initiated a probe into potential data leak of its vehicle loans customers, following claims that the lender's cyber defences were breached by a group of hackers.

"AU Small Finance Bank is investigating a potential data leak involving a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which holds limited data relating to our vehicle loan customers. We reaffirm that the bank's own systems remain unaffected and all banking services are operating normally," the lender had said in a statement.

The Salesforce statement issued on Saturday said the company does not comment on specific customer issues as a matter of policy and that its teams are proactively engaged to support customers as needed.

More...