Tata Consultancy Services (TCS) has affirmed that its systems remained secure during the recent cyberattack that affected UK retailer Marks & Spencer (M&S), a longstanding client of the Indian IT giant.
During TCS’s annual shareholder meeting, independent director Keki Mistry stated unequivocally that “none of TCS’ systems or users were compromised,” clarifying that the breach, which led to the theft of customer data from M&S, had no impact on the company’s infrastructure or other clients.
The incident had raised concerns due to TCS’s integral role in managing M&S’s technology systems. In early 2023, TCS had reportedly secured a $1 billion contract to modernize M&S’s legacy IT operations, deepening a relationship that spans over a decade. This partnership has seen TCS support M&S through various digital transformation initiatives, making it a key technology provider for the British retail chain.
Despite the scale of the cyberattack and the sensitivity of the customer data involved, TCS’s swift clarification serves to reassure investors and clients alike. “As no TCS systems or users were compromised, none of our other customers are impacted,” Mistry added, seeking to distance the company from any implication of vulnerability.
Cybersecurity has become a critical issue for global IT service providers, with clients increasingly reliant on firms like TCS to provide robust digital defenses. A breach tied to a major partner could pose reputational and operational risks, which makes TCS’s firm stance on the matter particularly significant.
While M&S has yet to release detailed findings from its internal investigation, industry experts suggest that third-party vulnerabilities are often exploited in such attacks. However, TCS’s statement underscores that the breach was isolated to M&S and did not originate from or involve TCS-managed systems.
The confirmation is expected to restore confidence among TCS stakeholders and reinforce the company’s reputation for maintaining secure and resilient IT infrastructure, even while managing large-scale and complex digital projects for global clients.