Ransomware attack hits Indian tech giant Tata Technologies

Tata Technologies Ltd. recently faced a ransomware attack that disrupted some of its IT services, prompting the company to take immediate precautionary measures. A subsidiary of Tata Motors, Tata Technologies is a prominent Indian multinational specializing in automotive design, aerospace engineering, and research and development. The firm plays a vital role in India’s technology landscape, employs over 11,000 professionals, generates an annual revenue of $600 million, and operates across 18 locations spanning India, North America, Europe, and the Asia-Pacific region.

In an official statement submitted to India’s national stock exchange, the company acknowledged the cybersecurity breach and confirmed that affected IT systems had since been restored. Despite the attack, Tata Technologies assured that its client delivery services remained fully operational, ensuring that customer operations were not disrupted.

The notice stated, “We have identified a ransomware incident that impacted a few IT assets. As a precaution, certain IT services were temporarily suspended, but they have now been restored. Throughout the incident, client delivery services continued to function without interruption.”

A comprehensive investigation is currently underway with the assistance of cybersecurity experts to assess the extent of the breach. However, no known ransomware groups have yet claimed responsibility for the attack. It also remains unclear whether any sensitive data was compromised.

Ransomware attacks often involve data theft, even if encryption is prevented. For technology firms like Tata Technologies, such breaches pose significant risks, as exposure of confidential data could threaten intellectual property and proprietary advancements.

This is not the first time a Tata Group entity has been targeted. In October 2022, the now-defunct Hive ransomware group infiltrated Tata Power, India’s leading integrated power company. The attackers stole and leaked sensitive data, including engineering schematics, financial records, banking details, and customer information, on the dark web as part of their extortion efforts.