RE: A matter of time12 Apr 2026 15:38
Tata
Be careful what you wish for!
Tata Motors faced a catastrophic data exposure in 2023 that left over 70 terabytes of sensitive information vulnerable due to poor security practices, including hardcoded AWS credentials in its E-Dukaan spare parts portal and flawed client-side encryption on the FleetEdge platform. Although Tata Motors confirmed the flaws were fixed by January 2024, the breach exposed hundreds of thousands of customer invoices, permanent account numbers (PANs), database backups, and internal financial dashboards accessible to over 8,000 users.
In late January 2025, Tata Technologies, a subsidiary of Tata Motors, suffered a ransomware attack that temporarily suspended some IT services, though client delivery operations remained unaffected. Following this, a ransomware group leaked approximately 1.4 terabytes of data on the dark web in March 2025, including employee records and business contracts, though the company has not fully clarified if this data originated from the January incident.
Most recently, Jaguar Land Rover (JLR), another Tata Motors subsidiary, endured a devastating cyberattack starting August 31, 2025, which forced a month-long global production shutdown and caused estimated losses of £50 million per week. The attack, attributed to the Scattered Lapsus$ Hunters group, crippled JLR's IT infrastructure, which had recently undergone an £800 million modernisation with Tata
Consultancy Services (TCS), leading to a phased restart of operations on October 8, 2025.
Are you Sure you would use TCS for any pension service!!
Sign In
Follow the stocks
