Breaches and incidents
HCLTech (India): hacker group claims employee data; company says data is years old and no breach found
HCLTech filed a clarification that a hacker group claimed potential exposure of limited HCLTech employee data.
- Disclosed
- Verification
- Checked against a primary source
What happened
- HCLTech filed a clarification that a hacker group claimed potential exposure of limited HCLTech employee data; initial investigation found the data “may be limited and dated to a few years back” and no evidence of breach of its systems or client engagements. MediaNama, citing Indian Express, reports the claim involved over 2.5 lakh employee records taken from a Microsoft Azure tenant with compromised credentials.
- Root cause: per attacker claim, compromised credentials to an Azure tenant; not confirmed by HCLTech.
- Attacker: group not named in the filing (the broader Azure-tenant dump campaign is covered in gap_campaigns.md).
- Response: further investigation; HCLTech has not said whether employees or regulators were notified.