The Times of India reports:
TCS informed the stock exchanges on Monday that it received threat-intelligence alerts alleging possible exposure to certain employee information but said its investigation found no credible evidence of a breach of its systems or customer
environments.The disclosure follows a post by data security firm S2W on X, which said a threat actor using the name “TheHatman” had allegedly offered more than 800,000 TCS employee records for sale on an underground cybercrime forum. The listing, claims the data was extracted from TCS’ Azure environment using compromised credentials. However, the claim raises questions because TCS has about 5.9 lakh employees, making the alleged database larger than the company’s current workforce.
The alleged dataset includes employee names, IDs, email addresses, job titles, phone numbers, and addresses.
Read more at The Times of India.
The Deccan Herald quotes TCS’s statement in the BSE filing:
“The information referenced appears to be more than four years old and limited to basic employee information. There is no indication that customer data, customer systems or TCS operational systems have been impacted. . The attacker claims to have used password spray and Multi-Factor Authentication (MFA) fatigue as the attack vector,” the company said in the filing.
