Breaches and incidents

Indian Hotels Company (Taj) and group hotel companies (India): malware incident on select IT systems

IHCL disclosed on 4 Sep 2025 a malware incident affecting select IT systems, with action to contain it and authorities notified.

Disclosed
Verification
Checked against a primary source

What happened

  • IHCL disclosed on 4 Sep 2025 a malware incident affecting select IT systems, with action to contain it and authorities notified; listed affiliates Oriental Hotels (5 Sep, identical wording) and Taj GVK Hotels (5 Sep, “IT Security incident”, scanned filing not machine-readable) filed the same day or next. PTI reports IHCL subsidiary Benares Hotels (Taj Ganges, Nadesar Palace) also filed a similar IT security notice.
  • Root cause: not disclosed.
  • Attacker: not disclosed; no customer-data impact stated.
  • Response: containment, monitoring, authorities notified.