AYA Bank Reports Attack on Outdated Portal, Alleged Customer Data Exposure

Summary
AYA Bank reported an attack targeting an outdated application portal, with some customer information allegedly exposed. The bank said its core banking, AYA Pay and card payment systems were unaffected.
Key points
- AYA Bank reported a cyber attack targeting an outdated application portal.
- Some customer information was allegedly exposed; the article provides no independent confirmation.
- The attack was attributed to a group calling itself Lapsus$.
- AYA Bank said its core banking systems, AYA Pay wallet and card payment systems were unaffected.
Article Details
- Victim Organization
- AYA Bank
- Victim Domain
- ayabank.com
- Incident Type
- Cyber attack targeting an outdated application portal
- Disclosure Date
- 2026-06-23
- Data Types Exposed
- Customer information (unspecified; alleged)
- Operational Impact
- The outdated application portal was targeted. AYA Bank said its core banking systems, AYA Pay wallet services, and card payment systems were unaffected.
- Claim Status
- alleged
