The Hunters International ransomware group has claimed responsibility for a cyberattack on Tata Technologies. This Ransomware attack reportedly occurred in January 2025 and involved the theft of approximately 1.4 TB of data, encompassing around 730,000 files from the company.
Details of Tata Ransomware Attack
In January, Tata Technologies disclosed that it experienced a security breach due to ransomware actors. The company noted that the impact on its operations was minimal and that client delivery services remained unaffected. Tata Technologies is currently in the process of restoring its IT systems and has engaged external experts to assist with the investigation.
Despite the company’s reassurances, Hunters International has since added Tata Technologies to their extortion page on the dark web. They claim that if their ransom demands are not met within a week, they will release the stolen files.
Hunters International has threatened, “We will release the stolen files in exactly one week if a ransom demand is not met.” However, they have not provided any samples of the stolen data or clarified the types of documents involved.
Previous Activities of Hunters International: A History of High Profile Attacks
Hunters International emerged as a prominent ransomware group in late 2023, possibly rebranding from the Hive ransomware group. Their high-profile attacks include breaches of:
- U.S. Navy contractor Austal USA
- Japanese optics manufacturer Hoya
This group is notorious for its lack of ethical boundaries, reportedly engaging in individual extortion cases, including targeting patients at Fred Hutch cancer center.
Who are Tata Technologies?
Tata Technologies, founded in 1989 and headquartered in Pune, India, specializes in engineering and digital solutions for the manufacturing sector. The firm operates in 27 countries with a workforce exceeding 12,500 employees. Their primary focus areas include automotive, aerospace, and industrial sectors, providing product development and digital transformation services.
As Tata Technologies continues to address the repercussions of this ransomware attack, they are yet to issue further updates. The situation highlights the ongoing risks that enterprises face from ransomware groups like Hunters International.
