3 weeks ago
HCLTech denies system breach after hacker claims employee data theft
Some computer hackers said on a secret part of the internet that they had stolen information about people who work at a big tech company called HCLTech.
The hackers said they had details like workers' names, email addresses, and phone numbers, and that they wanted to sell that information.
HCLTech is a company in India that helps other companies with their computers.
The company looked into the claim and said the information might be from a few years ago.
HCLTech also said its own computer systems were not broken into.
The company said it did not find any proof that the systems it uses to help its customers were in danger.
The hackers said they got the information from a special cloud service made by Microsoft.
HCLTech does not agree with the hackers and says its systems are safe.
HCL Technologies responded to a hacker group's claim that it accessed employee data, saying the allegedly stolen data may be limited and dated to a few years back.
In an exchange filing on Monday, August 10, HCLTech denied that there has been a breach of its internal systems.
The company said it found no evidence that its client engagement systems were compromised.
A threat actor on a dark web forum claimed to be selling a dataset of over 250,000 employees, including names, email addresses, job titles, departments, phone numbers, physical addresses, and employee and service account records.
The hacker claimed the dataset was obtained from a Microsoft Azure Tenant using compromised credentials.
- Who
- HCL Technologies (HCLTech), an Indian IT services company, and an unidentified hacker group
- What
- A hacker group claimed to have accessed and be selling HCLTech employee data, while HCLTech said the data may be years old and denied any breach of its internal systems
- Where
- India, where HCLTech is based; the claimed dataset was offered for sale on a dark web forum
- When
- Reported in an exchange filing on Monday, August 10
- Why
- The threat actor claimed the data was obtained from a Microsoft Azure Tenant using compromised credentials; HCLTech disputes the claim
Hacker's Claim
HCLTech's Response
Employee data breach
Hacker's Claim
A threat actor on a dark web forum claimed to be selling a dataset of over 250,000 HCLTech employees, allegedly obtained from a Microsoft Azure Tenant using compromised credentials.
HCLTech's Response
HCLTech said the allegedly stolen data may be limited and years old, denied any breach of its internal systems, and said it found no evidence that client engagement systems were compromised.
Key facts
- Company
- HCL Technologies (HCLTech), Indian IT services company
- Filing date
- Monday, August 10
- Claimed affected records
- Over 250,000 employees
- Claimed data types
- Full names, email addresses, job titles, departments, phone numbers, physical addresses, employee and service account records
- Company response
- Data may be limited and years old; denied internal system breach; no evidence client engagement systems compromised
- Claimed data source
- Microsoft Azure Tenant, allegedly via compromised credentials
Sources
Related news
HCLTech, TCS say no evidence of breach after hacker claims
HCLTech Says No Evidence Of Data Breach After Hacker Claim
TCS Denies Customer Data Breach After Employee Data Leak Claims
TCS finds no credible evidence of data breach after alert
CERT-In Warning: Microsoft Teams, Office, Azure Face Hacking Risk
Cognizant Warns Customers of Potential Personal Data Exposure
ONAM Cloud Launches Enterprise Infrastructure for Indian Startups
Microsoft CEO Satya Nadella’s Pay Soars Amid AI, Cloud Growth
Microsoft Employee Data Reveals AI and Cloud Compensation
GitHub CTO Apologises After Platform's Major 7.5-Hour Outage
GitHub Blames Seven-Hour Outage on Critical Infrastructure Failure
