HCLTech and TCS deny data breach claims

HCLTech and Tata Consultancy Services (TCS), two of India's largest IT services firms, issued statements denying any breach of their systems after a hacker group claimed exposure of employee-related data. HCLTech, in a stock exchange filing, said its initial investigation found no evidence of a breach of its systems or client engagements, and that the alleged data appears limited and dated to a few years back. TCS similarly reported receiving threat-intelligence alerts about possible exposure of employee information, but after investigation found no credible evidence of a breach of its systems or customer environments. TCS noted the information referenced appears to be more than four years old and limited to basic employee information, with no impact on customer data or operational systems. The alleged attacker claimed to have used password spraying and multi-factor authentication (MFA) fatigue as attack vectors. Both companies stated they continue to monitor the situation and will disclose any material findings. Shares of HCLTech traded higher at Rs 1,371 on the Bombay Stock Exchange following the clarification.