TCS Finds No Credible Evidence of System Breach After Threat Alerts

Tata Consultancy Services announced on August 10, 2026, that it has found no credible evidence of a breach of its systems or customer environments following threat intelligence alerts about the potential exposure of employee data. The Indian IT services giant stated in a regulatory filing that the information referenced in the alerts appears to be more than four years old and limited to basic employee details.

The company disclosed that it received alerts alleging the possible exposure of certain employee information. An investigation was launched, and TCS concluded there was no indication that customer data, customer systems, or its own operational systems were impacted. The attacker reportedly claimed to have used password spraying and multi-factor authentication fatigue as attack vectors. Password spraying involves attempting to log into accounts using a few common passwords, while MFA fatigue refers to bombarding a user with authentication requests until they approve a malicious login.

TCS emphasized that it has maintained strong safeguards against such techniques for more than two years. The company stated that its current review indicates these controls remain effective...