Breaches and incidents

Tata Consultancy Services (India): threat-intel alerts of employee data exposure, attacker claims password spray and MFA fatigue

TCS told the exchanges it received threat-intelligence alerts alleging exposure of employee information.

Disclosed
Verification
Checked against a primary source

What happened

  • TCS told the exchanges it received threat-intelligence alerts alleging exposure of employee information; it found no credible evidence of a breach of TCS systems or customer environments and said the data appears over four years old and limited to basic employee details.
  • Root cause: attacker claims password spraying and MFA fatigue; TCS says it has had safeguards against these for over two years.
  • Attacker: not named in the filing.
  • Response: continued monitoring and assessment.