Tata Technologies reports ransomware attack in stock exchange filing

Tata Technologies, the Pune based product engineering and digital services arm of India's Tata group, disclosed on January 31, 2025 that it had been hit by a ransomware attack. The company filed the notice under India's listing disclosure rules. The Record reported the filing went to the National Stock Exchange of India, while Infosecurity Magazine reported it was sent to the Bombay Stock Exchange.

The company said the attack had affected a small number of its IT assets, and that some IT services were suspended as a precaution before being restored. It stated that client delivery services remained fully functional and unaffected throughout, and that a detailed investigation was under way with outside experts to establish the root cause and take remedial action.

Tata Technologies declined to say which threat group was responsible, which parts of the business were touched, or whether any data had been stolen. No group claimed the attack at the time of disclosure.

Attribution surfaced weeks later. In early March 2025 the Hunters International ransomware operation listed the company on its leak site, claiming to hold 730,160 files totaling about 1.4 terabytes, and threatened to publish them. The Register reported that the gang provided no sample files to substantiate the claim, and Tata Technologies did not comment on the extortion demand.