Tata Technologies Hit by Massive Ransomware Attack: 1.4TB of Data Allegedly Stolen

In a shocking turn of events, Tata Technologies, an Indian engineering firm specializing in automotive and aerospace sectors, has fallen victim to a significant ransomware attack. The attack, which occurred in February 2025, has compromised critical IT services, causing temporary suspensions of some operations.

Ransomware group Hunters International has posted a 1.4TB dataset for sale on the dark web. The data, which reportedly belongs to Tata Technologies, includes over 730,000 files. While the specific content of these files hasn’t been revealed, the breach has raised serious concerns regarding the company’s data security. Tata Technologies, known for its high-profile clientele like Airbus, Ford, Jaguar, and Honda, is now dealing with a major security crisis.

“Further detailed investigation is underway in consultation with experts to assess the root cause and to take remedial action as necessary,” said a Tata spokesperson. “As a precautionary measure, some of the IT services were suspended temporarily and have now been restored.”

The dark web listing, which went live on March 3, 2025, has a countdown set to expire in six days. This suggests that Hunters International intends to release the stolen data unless a ransom is paid.

This latest breach is not Tata Technologies’ first run-in with ransomware. The company is part of the Tata Group, a massive conglomerate with over 100 companies across various sectors, making it a prime target for cybercriminals. In fact, this is the latest in a series of cyberattacks targeting the Tata Group. In October 2022, Tata Power was hit by ransomware, followed by Tata Steel’s attack by the REvil gang in 2021. Tata Teleservices was reportedly targeted in 2023.

This pattern underscores the growing frequency and severity of ransomware attacks, with artificial intelligence (AI) reportedly playing a role in making cyberattacks more accessible and effective. As cybercriminals gain new tools, businesses are finding it increasingly difficult to protect themselves from such breaches.

Also read: Viksit Workforce for a Viksit Bharat

Do Follow: The Mainstream formerly known as CIO News LinkedIn Account | The Mainstream formerly known as CIO News Facebook | The Mainstream formerly known as CIO News Youtube | The Mainstream formerly known as CIO News Twitter

About us:

The Mainstream formerly known as CIO News is a premier platform dedicated to delivering latest news, updates, and insights from the tech industry. With its strong foundation of intellectual property and thought leadership, the platform is well-positioned to stay ahead of the curve and lead conversations about how technology shapes our world. From its early days as CIO News to its rebranding as The Mainstream on November 28, 2024, it has been expanding its global reach, targeting key markets in the Middle East & Africa, ASEAN, the USA, and the UK. The Mainstream is a vision to put technology at the center of every conversation, inspiring professionals and organizations to embrace the future of tech.