Rankiteo Logo
Rankiteo
Leader in Cyber Underwriting
Loading...
NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop
WindowsmacOSLinux
Download
Aye Finance Ltd

Aye Finance Ltd Vendor Cyber Rating & Cyber Score

ayefin.com

​Headquartered in Gurgaon, ​Aye Finance is a new-age finance company providing business loans to ​​small and micro enterprises across India​. ​Since 2014 we have continued to​ chart an exciting growth path in this under-banked segment while maintaining a high benchmark for credit quality​​. These millions of profitable small and micro businesses are, essentially, locked out of the financial system. We believe we can overcome this financing challenge and unlock a massive business opportunity while creating a transformative social impact. Our team brings together the best of many worlds – sound business practices, deep understanding of the micro-enterprise environment, high achievement orientation and a passion for delivering


AFL A.I CyberSecurity Scoring

AFL
Company Information
Website:https://www.ayefin.com
Employees number:4,069
Number of followers:1,000
NAICS:52
Industry Type:Financial Services
Homepage:ayefin.com
AFL Risk Score (AI oriented)
Between 650 and 699
logo
AFLFinancial Services
Updated:
28/03/2026
687/1000
Weak
B
AaaAaABaaBaBCaaCaC
Powered by our proprietary A.I cyber incident model
Insurance prefers TPRM score to calculate premium
AFL Global Score (TPRM)
xxxx
logo
AFLFinancial Services
•••
Score locked
Instant access to detailed risk factors
Vulnerabilities
Benchmark vs. industry & size peers
Findings

AFL
AFLWeak
Current Score
687B (WEAK)
01000
1 incidents
-89 avg impact
Incident timeline with MITRE ATT&CK tactics, techniques, and mitigations.
JULY 2026
692Before Incident
JUNE 2026
691Before Incident
MAY 2026
689Before Incident
APRIL 2026
688Before Incident
MARCH 2026
687Before Incident
FEBRUARY 2026
685Before Incident
JANUARY 2026
684Before Incident
DECEMBER 2025
688Before Incident
NOVEMBER 2025
680Before Incident
OCTOBER 2025
679Before Incident
SEPTEMBER 2025
766Before Incident
Breach
27 Sep 2025AFL
Aye Finance

Unsecured Cloud Server Leak Exposes 2.73 Lakh Bank Transfer Records in India

677After Incident
CRITICAL-89
AYE0302903092825
An unsecured Amazon cloud server exposed 2.73 lakh (273,000) bank transaction records, including unredacted bank account numbers, transaction amounts, names, phone numbers, and email addresses of customers. The leaked data, formatted per National Automated Clearing House (NACH) standards, originated from 38 banks and NBFCs, with Aye Finance accounting for 59.63% of the exposed files. While no KYC, Aadhaar, or PAN details were compromised, the breach involved sensitive financial transaction data linked to individuals and institutions. The misconfiguration was traced to an integration partner managing ACH mandates, but no entity took responsibility. The server was secured only after UpGuard’s intervention and escalation to CERT-In, with delays in response from affected parties. The leak posed risks of financial fraud, identity theft, and reputational damage to both customers and financial institutions involved.
INCIDENT DETAILS -
TYPE
data breachcloud misconfigurationunauthorized data exposure
IMPACT
bank account numbers (unredacted)transaction amountsindividuals’ namesphone numbersemail addressesACH mandate applications (unsigned)Amazon cloud server (S3 bucket)Operational Impact: potential fraud risk due to exposed banking details; reputational damage to affected institutionsBrand Reputation Impact: high (due to exposure of sensitive financial data and lack of accountability from affected entities)Legal Liabilities: potential regulatory scrutiny under India’s data protection laws (e.g., Digital Personal Data Protection Act, 2023)Identity Theft Risk: high (exposed PII + banking details)Payment Information Risk: high (unredacted bank account numbers and transaction data)
DATA BREACH
financial records (bank transfers)personally identifiable information (PII)contact informationSensitivity Of Data: high (banking details + PII, but no KYC/Aadhaar/PAN per integration partner)Data Exfiltration: yes (files were accessible online; 55,000 files downloaded by UpGuard for analysis)Data Encryption: no (files were unredacted and unencrypted)ACH mandate applications (unsigned)bank transaction recordsnamesphone numbersemail addresses
AUGUST 2025
766Before Incident

Frequently Asked Questions

?
What is the current A.I Rankiteo Cyber Score for AFL ?
?
What was AFL's A.I Rankiteo Cyber Score in June 2026 ?
?
What was AFL's A.I Rankiteo Cyber Score in May 2026 ?
?
What was AFL's A.I Rankiteo Cyber Score in April 2026 ?
?
What was AFL's A.I Rankiteo Cyber Score in March 2026 ?
?
What was AFL's A.I Rankiteo Cyber Score in February 2026 ?
?
What was AFL's A.I Rankiteo Cyber Score in January 2026 ?
?
What was AFL's A.I Rankiteo Cyber Score in December 2025 ?
?
What was AFL's A.I Rankiteo Cyber Score in November 2025 ?
?
What was AFL's A.I Rankiteo Cyber Score in October 2025 ?
?
What was AFL's A.I Rankiteo Cyber Score in September 2025 ?
?
What was AFL's A.I Rankiteo Cyber Score in August 2025 ?
?
What is the average per-incident point impact on AFL's A.I Rankiteo Cyber Score over the past 12 months ?
?
Where can I access detailed records of all cyber incidents associated with AFL ?
?
Where can I find a summary of the A.I Rankiteo Risk Scoring methodology ?
?
Where can I view AFL's profile page on Rankiteo ?
?
How accurate is the A.I Rankiteo Risk Scoring methodology ?