AU SFB data leak: Salesforce says no vulnerability at its end

What happened

Salesforce said it found no vulnerability on its side in the suspected data leak at customer AU Small Finance Bank. AU Small Finance Bank is investigating a potential leak of vehicle loan customer data from a Salesforce-hosted platform and says its own systems are unaffected.

Confirmed

Global impact / market context

A breach of vehicle loan customer records could raise costs for AU Small Finance Bank through remediation, security upgrades, possible regulatory action, and customer attrition. Salesforce's denial shifts scrutiny toward how the bank's data was configured and managed on the hosted platform, which matters for both firms' reputations.

Analyst inference

The dispute over where the leak originated creates uncertainty for investors in both companies. A hacking group claims to hold KYC records, which means identity documents used to verify customers. For a lender, trust in data protection supports deposits and loan growth, so unresolved leak claims can weigh on how investors judge risk.

Analyst inference

What to watch

1. AU Small Finance Bank's investigation into the potential leak of vehicle loan customer data from the Salesforce-managed platform, and any findings it discloses about how the claimed breach occurred. Confirmed
2. Watch whether the bank or Salesforce provides further details on the scope of affected customer records, and whether any regulator opens an inquiry or requires remedial action. Proposed
3. Track signs of customer response, such as complaints or account closures, and any added security or legal costs that could affect the bank's expenses and reputation. Analyst inference

Evidence

• Original source link unavailable