TCS Denies Report On Losing Marks & Spencer Contract Due To Cyberattack Failures

The report is misleading, with factual inaccuracies including the size of the contract and the continuity of TCS's work for Marks & Spencer (M&S), the IT company said.

TCS claimed the service desk contract with M&S followed a regular competitive tender process initiated in January. (Photo source: TCS)

Tata Consultancy Services Ltd. denied a UK media report that said apparel retailer Marks & Spencer ditched the Indian IT outsourcing giant, accused of being at fault for its devastating cyberattack earlier this year.

M&S, which lost an estimated GBP 300 million from the hack, ended a long-running contract with TCS to operate its technology helpdesk in July, The Telegraph newspaper reported.

"The report published by The Telegraph is misleading, with factual inaccuracies including the size of the contract and the continuity of TCS's work for Marks & Spencer (M&S)," the IT company said in a statement late Sunday.

TCS claimed the service desk contract with M&S followed a regular competitive tender process initiated in January, with the retailer opting to proceed with other partners much before the cyber incident in April. "These matters are hence clearly unrelated."

"The commercial aspect of the service desk area also represents an insignificant part of TCS's overall engagement with M&S. TCS continues to work on numerous other areas, in its role as a strategic partner for M&S and is proud of this longstanding partnership," the statement said.

Also Read: TCS Vs Infosys Vs Wipro Vs HCLTech: What Q2 Results Of India's Large-Cap IT Majors Reveal — Here's A Snapshot

As per The Telegraph report, the hackers, from a group called 'Scattered Spider', are said to have gained access to M&S’s systems through “social engineering”, where hackers call technology desk helplines and impersonate executives to get their passwords reset.

In July, Marks & Spencer Chairman Archie Norman told British lawmakers that hackers had used "sophisticated impersonation" to gain entry "involving a third party".

Shortly after the incident, TCS held an internal investigation into whether its technology helpdesk had acted as a gateway for hackers to access M&S’s systems. It later said it had found no fault, the newspaper reported.

In its statement, the Mumbai-headquartered IT company clarified that it conducted a scan of its own networks and systems after the cyber incident and concluded that the vulnerabilities did not originate from there. "TCS does not provide cybersecurity services to M&S. This is a service that is provided by another partner," the statement said.

Also Read: Tata Motors JLR Cyber-Hack Worst In UK History That Hit 5,000 Firms, Research Finds

Watch LIVE TV, Get Stock Market Updates, Top Business, IPO and Latest News on NDTV Profit. Feel free to Add NDTV Profit as trusted source on Google.
WRITTEN BY
Shubhayan Bhattacharya
Shubhayan covers markets and business news at NDTV Profit. He has a keen in... more
GET REGULAR UPDATES
Add us to your Preferences
Set as your preferred source on Google