Breaches and incidents

Metro Brands (India): Active Directory intrusion with privileged activity and credential-access attempts

The footwear retailer (Metro, Mochi, Walkway) reported unauthorised activity in its IT infrastructure including Active Directory, found through security...

Disclosed
Verification
Checked against a primary source

What happened

  • The footwear retailer (Metro, Mochi, Walkway) reported unauthorised activity in its IT infrastructure including Active Directory, found through security monitoring; investigators saw unauthorised privileged activity, suspected credential-access attempts and malicious communications across multiple systems. No material financial loss so far; possible data exposure still under investigation.
  • Root cause: not disclosed.
  • Attacker: not disclosed; no claim found.
  • Response: containment with security partners, specialised investigators engaged, CERT-In notified.