AU Small Finance Bank flags potential data leak on vehicle loan platform

AU Small Finance Bank (NSE: AUBANK) is investigating a potential data leak at a third-party software-as-a-service platform used to onboard vehicle loan customers, with about 28.5 lakh onboarded through it, it said in a filing on 04 Nov 2026. The Bank says it became aware of the incident on 29 Oct 2026.

Exchanges sought clarification on a media report

The National Stock Exchange and BSE sought clarification dated 2 Nov 2026 on a media report titled 'AU Bank probes potential data leak'. In reply, the Bank said it became aware on 29 Oct 2026 of a potential data leakage incident involving a third-party software-as-a-service platform.

The platform is hosted and managed by a reputed global third-party vendor. It is used to onboard the Bank's vehicle loan customers and contains customer information obtained at the time of loan onboarding.

The forensic investigation is under way

Based on preliminary findings so far, the Bank says the incident may have resulted in data leakage of some of its vehicle loan customers. The Bank is undertaking a detailed internal and external forensic investigation with leading cyber security firms to establish the nature and extent of the potential leak.

The Bank says it has reported the matter to the Reserve Bank of India and CERT-In in accordance with applicable regulatory requirements. It also says it will make further disclosures, if required.

Other systems and services are operating normally

The Bank says its other systems remain unaffected and all services are operating normally. It says customer protection continues to be its highest priority.

What the incident means for AU Small Finance Bank's shareholders

The Bank states that the incident does not have any impact on its business operations, financial performance or business continuity. The filing does not say how many customers' data was actually leaked, what the forensic investigation has found, or when it will be completed.

The next step the Bank names is further disclosure, if required under applicable regulatory requirements.

At a glance