TCS and HCLTech Deny System Breaches After Data Leak Claims

Tata Consultancy Services (TCS) and HCLTech both reported no evidence of system breaches after threat actors claimed to have exposed employee data. The incidents emerged following reports that a threat actor known as TheHatman offered over 800,000 TCS employee records for sale on BreachForums, a claim highlighted by data security firm S2W.

TCS informed stock exchanges that its investigation found no credible evidence of a breach to its operational systems or customer environments. The company stated the exposed information consists of basic employee details, such as names and phone numbers, and appears to be more than four years old. While the attacker claimed to have used password spraying and multi-factor authentication fatigue to access an Azure tenant, TCS asserted that safeguards against these vectors have been in place for over two years.

Shortly after the TCS reports, HCLTech announced it had conducted its own initial investigation following similar claims from a hacker group. HCLTech stated there was no evidence of a breach to its systems or impact on client engagements, noting that any potentially exposed data may be limited and dated from several years ago. Both firms maintained that their current security controls remain effective while continuing to monitor the situation.