TCS Employee Data Exposure Claims

Tata Consultancy Services (TCS), India's largest IT services company, received threat-intelligence alerts on August 10, 2026, alleging possible exposure of certain employee information. The alerts, which originated from a darknet post by a seller known as 'TheHatman', claimed that TCS employee data was being offered for sale, including full names, employee IDs, email addresses, job titles, phone numbers, and addresses. TCS investigated the claims and stated that it found no credible evidence of a breach of its systems or customer environments. The company noted that the referenced information appears to be over four years old and limited to basic employee details. The attacker reportedly used password spray and Multi-Factor Authentication (MFA) fatigue as attack vectors, but TCS asserted that it has had safeguards against such techniques for over two years and that its controls remain effective. TCS continues to monitor the situation and will take appropriate action if required. The company's shares closed 0.80% lower on the Bombay Stock Exchange following the news.