AU Small Finance Bank Sistemas internos da AU… · Breach

Scarlett Group Claims Attack on India's AU Small Finance Bank

Oct 29, 2026 · 1 min read

The Scarlett extortion group claims an attack on AU Small Finance Bank, one of India's largest small finance banks, headquartered in Jaipur, in a post dated Oct 29, 2026. The claim shares no volume or type of data, has not been independently verified, and the bank has not confirmed a cyber incident. Customers should follow official channels and watch for fraud calls, fake app links and OTP scams.

By HIFY Radar newsroom Updated 10/29/2026 01:17 PM Get this every day →← Back to the feed 1 source

MediumBreachNo software to update

In this article

What happened
Why it matters
What to do
For the technical team
Timeline
Sources

What happened

The Scarlett extortion group named AU Small Finance Bank, one of India's largest small finance banks, as a victim in a post dated Oct 29, 2026. The claim gives no volume or type of data. The bank has not confirmed a cyber incident and there is no independent verification.

Why it matters

Banks hold customer identity, account and transaction data. If the claim holds, customers face fraud and scam risk, and the bank faces customer and regulator scrutiny. No operational or financial damage has been reported so far.

What to do

Wait for an official statement from AU Small Finance Bank and monitor both bank channels and Scarlett posts for details. Customers and partners should be careful with fraud calls, fake app links and OTP requests that reuse leaked data.

For the technical team

Affected: AU Small Finance Bank Sistemas internos da AU Small Finance Bank, um dos maiores small finance banks da Índia, com sede em Jaipur (Rajastão); · AU Small Finance Bank, headquartered in Jaipur, Rajasthan, India; scope of affected systems not detailed.
Exploitation: Claim posted by the Scarlett group itself on Oct 29, 2026 (UTC), reported by DailyDarkWeb. No details on data, no independent verification and no public confirmation from the bank.
Fix: Not applicable: no specific software, flaw or fix was cited in the sources.
More details: According to DailyDarkWeb, the bank offers personal and business banking, loans, cards and deposits, and holds customer identity, account and transaction data. The post classifies the case as an unverified threat-actor claim, not a confirmed breach, and warns about scams that reuse leaked data.