MUMBAI — Tata Consultancy Services (TCS), the country’s largest IT services company, reported on Monday that it has received threat-intelligence alerts alleging a possible leak of basic employee data. In an official exchange notification, the Tata Group company emphasized that there is no indication of any impact on customer data, customer systems, or its internal operational networks.
Referenced Data Outdated and Confined to Basic Details
Addressing the nature of the information referenced in the alerts, TCS clarified that the records appear to be over four years old and are strictly limited to basic employee details.
The company reassured stakeholders that core enterprise architecture and client-facing platforms remain entirely secure, with initial internal evaluations confirming that no sensitive operational data or proprietary assets were compromised.
Security Safeguards Repel Claimed Attack Vectors
According to the exchange notification, the alleged attacker claimed to have executed the breach using password spraying and Multi-Factor Authentication (MFA) fatigue as the primary attack vectors.
TCS explicitly refuted the effectiveness of these methods against its enterprise network, noting that the organization has maintained robust technical safeguards against such compromised-credential tactics for more than two years. Following a review of current systems, the IT major confirmed that its existing controls remain fully effective.
Stock Performance and Environmental Monitoring
Following the regulatory disclosure, TCS shares experienced a slight dip on the BSE on Monday, closing 0.80 percent lower at Rs 2,434 against a 0.06 percent gain in the broader benchmark index.
The company reaffirmed its commitment to maintaining active digital oversight, stating that security teams will continue monitoring the environment closely, evaluating any newly emerging information, and initiating appropriate corrective actions as necessary.
