A threat actor has claimed to have stolen more than 1.2TB of data from AU Small Finance Bank and put it up for sale. The claim has not been independently verified, and the bank has not confirmed it.

According to a post shared by the threat intelligence account ThreatMon on X, the actor claims to have accessed the bank's entire database, including customer accounts, personal details and financial records. The data is reportedly offered for sale for 8,500 US dollars, around 7.9 lakh rupees.

The alleged leak is said to include more than 22 lakh live customer accounts and over 19 lakh bank account numbers. The reports put the figures at 2,282,619 live customer accounts, 1,917,657 exposed bank account numbers and nearly 39 lakh KYC identity records. The alleged database is said to include sensitive customer information such as PAN and Aadhaar numbers, dates of birth, mobile numbers, email addresses and residential addresses.

The new claim directly contradicts the bank's official statement from late October 2026. The bank had attributed the incident to a limited data leak involving a third-party software-as-a-service platform managed and hosted by Salesforce, affecting only vehicle loan customers, and said its own core systems were unaffected and banking services continued normally.

The actor now alleges instead that the bank's own core systems were breached, not just the external platform. The bank had earlier said the possible leak involved about 28.5 lakh vehicle loan customers, that it had reported the matter to the Reserve Bank of India and CERT-In, and that a forensic investigation was under way.

Digit reported that it had reached out to the bank for an official statement on the new claim. Until the bank or regulators say more, the figures and the sale listing should be treated as allegations, not established fact.

[Source: digit.in](https://www.digit.in/news/general/au-small-finance-bank-data-breach-row-deepens-over-22-lakh-customer-accounts-allegedly-put-up-for-sale.html) | [Source: vpn.social](https://vpn.social/en/au-small-finance-bank-data-breach-1-2-tb-allegedly-for-sale)