Ransomware attack hit Indian multinational Tata Technologies

Indian multinational technology company Tata Technologies suspended some IT services following a ransomware attack.

Indian multinational Tata Technologies, a Tata Motors subsidiary, suspended some IT services following a ransomware attack.

The company, which is engaged in product engineering, provides services to automotive and aerospace original equipment manufacturers as well as industrial machinery companies. 

As of 2023, the IT giant has over 11,000 employees across 18 delivery centers worldwide, including India, North America, Europe, and Asia-Pacific.

The company confirmed that the ransomware attack has impacted a limited part of its IT infrastructure. In response to the incident, Tata Technologies temporarily suspended some of its IT services.

Company client delivery services were not impacted by the attack.

“Pursuant to Regulation 30 of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, this is to inform you that the Company has become aware of a ransomware incident that has affected a few of our IT assets.” reads the notice sent by by company to the National Stock Exchange of India. “As a precautionary measure, some of the IT services were suspended temporarily and have now been restored. Our Client delivery services have remained fully functional and unaffected throughout.”

The company did not reveal the name of the ransomware family that hit its systems or if threat actors had stolen data during the attack.

On October 14, 2022, Tata Power, India’s largest power generation company, announced a cyber attack hit its infrastructure. Threat actors hit the company’s information technology (IT) infrastructure.

The company confirmed that the security breach impacted “some of its IT systems.” The electricity giant immediately started operations to respond to the incident and restore the impacted systems.

A few days later, the ransomware gang Hive leaked the alleged stolen files on its Tor leak site. The gang claims to have breached the corporate network on October 3rd, 2022.

Stolen data include contracts, financial and business documents, engineering projects, and employees’ personally identifiable information (PII), including Aadhar card numbers.

Follow me on Twitter: @securityaffairs and Facebook and Mastodon

Pierluigi Paganini

(SecurityAffairs – hacking, ransomware attack)