AU Small Finance Bank on Friday said it is investigating a potential data leak involving vehicle loan customers.

Earlier, a hacker group claimed to have breached the lender's cyber defences.

The potential leak involves a software-as-a-service (SaaS) platform managed and hosted by Salesforce, which holds limited data relating to the lender’s vehicle loan customers.

The bank said its own systems “remain unaffected” and “all banking services are operating normally”.

The ScarlettGroup hacking group, however, claimed to have breached AU SFB’s KYC records, identity documents and other important data. 

The group threatened to leak sensitive customer and internal corporate data, according to threat intelligence platform Hackmanac.

"According to the attackers, the compromised information includes KYC records, personal identification documents, PAN and Aadhaar details, credit reports, bank statements, loan applications, signed agreements, insurance records, CRM data, employee information, login histories and audit logs," Hackmanac said in a social media post.

The verification of the claim is still pending, it added.

Last week, State Bank of India, the country’s largest lender, reported a cyberattack involving 3,897 customer records containing personally identifiable ⁠information leaked on the dark web.