Breaches and incidents
Tata Consultancy Services (India): says no TCS systems were compromised in the Marks & Spencer attack
PTI reports that at TCS’s AGM on 19 Jun 2025 independent director Keki Mistry said the M&S incident “is currently under review and investigation by the...
- Disclosed
- Verification
- Reported by a reputable outlet, citing the company
What happened
- PTI reports that at TCS’s AGM on 19 Jun 2025 independent director Keki Mistry said the M&S incident “is currently under review and investigation by the customer” and “the purview of the investigation does not include TCS”; he said no TCS systems were compromised and no other TCS customers were affected. The Easter 2025 attack closed M&S online sales for more than three weeks, with an estimated GBP 300 million hit to operating profit; a media report cited by PTI blamed human error at a third-party vendor.
- Root cause: per M&S reporting cited by PTI, entry via a third party with authorised access; TCS denies being the entry point. Not otherwise disclosed.
- Attacker: not named in the PTI report.
- Response: TCS says it followed its procedure and supports M&S recovery; it has not published an investigation of its own.