Ransomware
Tata Technologies Hunters International Ransomware Attack
Primary Source βIncident Details
Tata Technologies, a Tata Group subsidiary providing engineering and technology services in automotive, aerospace, and industrial sectors (12,500+ employees, operating in 27 countries), suffered a ransomware attack in January 2025. Hunters International claimed responsibility, alleging theft of 1.4 TB of data across 730,000 files. Data included employee personal information (active and former staff), purchase orders, and contracts with Indian and US clients. Tata stated operational impact was minimal and client delivery services were unaffected. When ransom was not paid, Hunters International published leaked data in March 2025. Notable as a major Indian engineering/OT sector company targeted; Hunters International later rebranded as ‘World Leaks’ in 2025.
Technical Details
- Initial Attack Vector
- Unknown; Hunters International typically uses phishing and exploits internet-facing systems
- Malware Family
- Hunters International ransomware
Timeline
- 2025-01-01 Breach occurred
- 2025-01-31 Publicly disclosed