Archive · 11 Aug 2026
TCS finds no credible evidence of data breach after alert
A big company in India called Tata Consultancy Services, or TCS for short, helps other companies with computers and information.
Someone told TCS that a person may have gotten some private details about TCS workers.
TCS looked into this claim very carefully.
It said it found no proof that its computer systems were broken into.
The information that was mentioned seems to be very old, more than four years old.
It is only simple information about workers, not secret customer information.
TCS said no customer data, customer systems, or important company systems were harmed.
The person who made the claim said they tried to get in by guessing passwords and by bothering workers with login requests.
TCS says it has had protections against these tricks for more than two years, and those protections are still working.
TCS will keep watching its systems to make sure everything stays safe.
Tata Consultancy Services (TCS), India's largest IT services company, said it found no credible evidence of a breach of its systems or customer environments after receiving threat-intelligence alerts alleging possible exposure of certain employee information.
TCS said the information referenced in the claims appears to be more than four years old and is limited to basic employee information.
The company stated there is no indication that customer data, customer systems, or TCS operational systems have been impacted.
The attacker reportedly claimed to have used password spraying and Multi-Factor Authentication (MFA) fatigue as attack vectors, and one report said the hacker claimed the data was pulled from TCS's Azure tenant using compromised credentials.
TCS said it has had strong safeguards against such techniques for more than two years, that its controls remain effective, and that it continues to monitor its environment.
- Who
- Tata Consultancy Services (TCS), India's largest IT services company, and an attacker who claimed to have exposed employee information
- What
- TCS said it found no credible evidence of a system breach after threat-intelligence alerts alleged possible exposure of basic employee information
- When
- Monday, announced in a stock exchange filing (reported on August 11, 2026)
- Where
- India, reported from New Delhi and Mumbai
- Why
- An attacker claimed to have accessed employee information using password spraying and MFA fatigue, prompting TCS to investigate the alerts
- Company
- Tata Consultancy Services (TCS)
- Company Status
- India's largest IT services company
- Claim Received
- Threat-intelligence alerts alleging possible exposure of certain employee information
- TCS Position
- No credible evidence of breach of TCS systems or customer environments
- Referenced Data
- More than four years old and limited to basic employee information
- Alleged Attack Vectors
- Password spraying and Multi-Factor Authentication (MFA) fatigue
- Safeguards
- In place for more than two years and assessed as effective
- Share Movement (Reported)
- TCS shares closed 0.80% lower at Rs 2,434 on the BSE, while the benchmark index gained 0.06%
Sources
No credible evidence of system breach: TCS on employee data exposure claims
TCS Receives Employee Data Leak Alert
TCS flags possible leak of basic employee data
TCS Rules Out Data Breach, Says Allegedly Exposed Employee Information Is Over 4 Years Old
