Data hostage crisis hits Airbus and Ford tech supplier

Tata Technologies, a multinational tech firm serving Airbus, Honda, Jaguar, and Ford, has allegedly suffered a ransomware attack.

Hunters International, the cybercriminal gang behind the alleged ransomware attack, has listed the India-based multinational company as a victim on its leak site on the dark web.

According to hackers’ message on March 3rd, cybercriminals hold a 1.4TB dataset with over 730,000 files. Ransomware gangs often list the victims on their dark web leak sites, attempting to muscle organizations into paying a ransom or face dealing with a damaging leak of stolen data.

The threat actor has not specified what information is in the stolen dataset. At the time of writing, the countdown is set to six days before the data allegedly belonging to Tata Technologies will be released.

This is not the first time Tata Technologies has been listed on a ransomware gangs' leak site. According to Cybernews' dark web monitoring tool, RansomLooker, this is the fourth time the company has been caught on the radar.

The LockBit gang listed a company subsidiary, Tata Teleservices, on October 6th, 2023. The REvil gang claimed Tata Steel on April 4th, 2021, while Tata Power was listed on October 24th, 2022.

Cybernews has reached out to the company for a comment, but a response is yet to be received.

Tata Technologies provides end-to-end product development services to automotive, aerospace, industrial heavy machinery, and other industries. It’s a subsidiary of Tata Motors, an auto behemoth with revenues exceeding $52.33 billion.

Hunters International has previously claimed SmartLynx Airlines, and ICBC London, as victims before publicly releasing data allegedly belonging to the companies.