HCLTech investigates ransomware attack on cloud project
NOIDA, INDIA — Indian IT giant HCL Technologies (HCLTech) reported that it has become aware of a ransomware attack targeting one of its cloud computing projects.
In a regulatory filing with the National Stock Exchange of India, HCLTech stated that the ransomware attack occurred in “an isolated cloud environment for one of its projects.”
The company also emphasized that the incident has not affected its overall global network and systems.
“There has been no impact observed due to this incident on the overall HCLTech network. Cybersecurity and data protection is a top priority for HCLTech,” said Manish Anand, Secretary for the $13 billion technology services firm.
HCLTech indicated that a detailed investigation is underway to determine the root cause of the cyber attack and take appropriate remedial measures. The company also consulted with relevant stakeholders but did not provide specifics on the breach.
Shares of Noida-based HCLTech, which employs over 225,000 people worldwide, fell by over three percent after reporting the ransomware incident.
The HCLTech security breach comes on the heels of ransomware attacks against other major Indian companies this year, including leading pharmaceutical maker Sun Pharmaceuticals. Last April, India’s Computer Emergency Response Team (CERT-In) said ransomware attacks climbed 53% in 2022, frequently aiming at critical infrastructure organizations.
While the HCL Technologies attack seems limited in scope thus far, it spotlights the cyber risks confronting India’s $227 billion information technology and IT-enabled services sector.
As one of the world’s top IT services providers, HCLTech and its peers handle sensitive client data that could prove lucrative for ransomware groups and cybercriminals.
HCL Technologies stated its investigation aims to avert future attacks. However, the latest incident shows that even isolated cloud-based networks remain vulnerable to intrusion. The company must ensure enhanced security and best practices are in place to keep critical systems and data safe.
