HCLTech and Tata Consultancy Services (TCS) have issued separate disclosures regarding claims of possible exposure of employee-related information. Both companies said their initial assessments have found no evidence that their operational systems, customer environments, or client engagements were compromised.
HCLTech Reviews Hacker Claims
HCLTech responded to reports that an unidentified hacker group claimed to have access to company employee data. In an exchange filing, the IT services company said the information being examined appeared to be limited in nature and may date back several years.
The company’s initial review found no evidence of a breach of HCLTech’s systems and no indication that any customer engagement had been impacted. HCLTech said its investigation is continuing and that it will communicate any material developments as the review progresses.
The clarification was issued on August 11 following reports surrounding the alleged employee-data exposure.
TCS Reports Similar Threat Intelligence Alert
A day earlier, on August 10, TCS issued a separate statement after receiving threat-intelligence alerts concerning the possible exposure of certain employee information.
TCS said the material referenced in the alert was more than four years old and consisted of basic employee information. Reports circulating on social media had claimed that records containing details such as employee names, job titles, and telephone numbers were being offered on a hacking forum.
TCS said its assessment had found no evidence that customer information, customer systems, or its own operational systems had been affected. The company also stated that controls designed to prevent the method associated with the alleged incident had been in place for more than two years and remained effective based on its current review.
The company said monitoring and assessment of the situation were continuing.
No Confirmed Current System Intrusion
Neither company’s disclosure confirms that a current cyber intrusion took place. Instead, the statements concern investigations into claims involving historical employee information, while both companies have distinguished those claims from any compromise of live production systems or customer environments.
The distinction is significant for large IT-services companies, which manage technology environments and support critical operations for customers across sectors including banking, healthcare, manufacturing, telecommunications, and government.
However, even older employee information can have security implications. Details such as names, job functions, telephone numbers, and employment relationships can potentially be combined with publicly available information to create more convincing phishing messages, impersonation attempts, or other social-engineering attacks.
The age of a dataset does not necessarily eliminate the risk, particularly where individuals continue to use the same contact information or remain associated with the same organizations.
Investigations Remain Ongoing
The two disclosures also highlight the role of threat-intelligence monitoring and regulatory filings in the early stages of corporate cybersecurity investigations.
Both HCLTech and TCS have limited their public statements to findings established through their respective reviews and have not confirmed the claims made by unidentified threat actors.
Further clarity will depend on forensic investigations, verification of the alleged datasets, and efforts to establish where the information originated and whether it was obtained through a security incident.
For now, the available information points to ongoing reviews of claims involving historical personnel data rather than confirmed breaches of current operational or customer systems.
 have issued separate disclosures regarding claims of possible exposure of employee-related...){kind=link}