- TCS says that none of its systems or users were affected in Marks and Spencer Attack
- M&S was hit by a great cyber attack in early 2025
- TCS promised an investigation, but so far it has offered little information
The supplier of third parties that many have blamed the main cyber attack against Marks and Spencer (M&S) has revealed its first findings of an internal investigation into their role in the incident.
Tata Consultancy Services (TCS) has said that none of its “systems or users were committed” as part of the cyber attack.
“As TCS systems or users were committed, none of our other clients are affected,” said independent director Keki Mistry his annual shareholders meeting, PakGazette information.
TCS and research paper
M&S was apparently beaten by the attack on April 22, revealing news from the incident several days later.
After an initial investigation, the experts proposed that the attackers could enter their systems by compromising workers in TCS, which has provided third -party services to M&S for more than a decade in Sparks, the rewarding scheme of the retailer client.
In 2023, according to reports, TCS also obtained a $ 1 billion contract to modernize M&S technology in its omnichannel supply and sales chain, with the aim of increasing online sales.
It was reported that TCS, part of the mass conglomerate of the Tata group, carried out a complete investigation, but has remained silent until this unexpected (and brief) mention.
M&S has predicted that the attack could cost around 300 million in operating profits lost in its financial year.
Recently it was revealed that hackers contacted the M&S Stuart Machin CEO in a mocking email the day after the attack, demanding payment for the attack.
This email was sent from the Dragonforce piracy collective, which carries out such attacks in exchange for payment or reward from other parts in exchange for a cut of any rescue payment.
M&S has not confirmed if he has paid a rescue to computer pirates, but admitted that some customer data were stolen in the attack. This did not include any password or payment card or detail, but the housing director, telephone numbers and birth dates may have been affected.
Any person interested in their data may have been taken, we recommend using a dark web monitoring service or using a rape monitor as if they have received me to verify the possible exhibitions.
TCS has not yet responded to a request for comments from Techradar Pro.