Loading story…
Bajaj Auto disclosed that a ransomware attack affected systems at both the parent company and its wholly owned subsidiary, Bajaj Auto Technology Ltd. The company said the incident was detected at about 8:00 AM IST and that internal technical teams, external cybersecurity specialists, and management launched containment and mitigation measures immediately. Bajaj Auto also notified CERT-In under the Information Technology Act, 2000, and reported the incident under SEBI Regulation 30.
The manufacturer said the response had so far limited the impact, but it did not say whether data was exfiltrated or whether manufacturing, supply chain, or other business operations were materially disrupted. Investor reaction was negative after the disclosure, with Bajaj Auto shares falling more than 2%, underscoring the market sensitivity around ransomware incidents affecting major industrial and automotive firms.
TTPs, infrastructure, and targeting history in one profile.
2 events from the most recent confirmed update back to the earliest known activity.
Following detection of the attack, Bajaj Auto said its internal technical teams, external cybersecurity experts, and management initiated containment and mitigation measures that were successful in limiting the impact so far. The company also notified CERT-In and disclosed the incident under SEBI Regulation 30.
Bajaj Auto said it detected a ransomware attack affecting both the parent company and its wholly owned subsidiary, Bajaj Auto Technology Ltd (BATL), at about 8:00 AM IST. The company did not disclose whether data was exfiltrated or whether manufacturing, supply chain, or broader business operations were materially disrupted.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See this adversary's TTPs, infrastructure, and targeting history, correlated against your exposure.
5 references tracked. Mallory keeps watching after this page renders.
fortuneindia.com
Open sourcetherecord.media
Open sourceupguard.com
Open sourceteiss.co.uk
Open sourcecybersecuritynews.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Jaguar Land Rover (JLR), the luxury automotive manufacturer and subsidiary of Tata Motors, experienced a significant operational outage due to a major cyberattack that forced the company to shut down its manufacturing systems. The incident led to a month-long disruption, with JLR initiating a controlled, phased restart of its manufacturing operations only after extensive downtime. Initially, the company stated that customer data did not appear to be compromised, but this position was revised a week later, indicating evolving understanding of the breach’s impact. Financially, the attack was devastating, with estimated losses ranging from $50 million to $70 million per week, and the total cost projected between $1.7 billion and $2.4 billion. The attack not only halted production but also highlighted the vulnerability of even large, resource-rich corporations to operationally crippling cyber incidents. Industry experts noted that this event went far beyond typical data theft, resulting in a complete operational outage that severely impacted JLR’s supply chain and business continuity. The British government responded by guaranteeing a £1.5 billion (approximately $2 billion) commercial bank loan to JLR, providing financial support as the company and its suppliers worked to recover from the disruption. This government-backed loan is structured so that JLR is responsible for repayment, but the lender is protected by the government guarantee in case of default. The incident has been cited as a case study in the high costs and business risks associated with ransomware and other forms of cyberattacks targeting critical manufacturing operations. Experts warn that automakers are increasingly attractive targets for ransomware gangs, as operational outages can pressure companies into paying ransoms quickly. Historical context shows that other major automakers, such as Honda, have also suffered significant outages due to cyberattacks, underscoring the sector’s susceptibility. The JLR attack has prompted renewed calls for robust incident response planning, improved cyber resilience, and greater investment in cybersecurity for operational technology environments. The event also demonstrates the potential for cyber incidents to have cascading effects across national economies, prompting government intervention to stabilize affected industries. As JLR resumes operations, the long-term impact on its reputation, supply chain relationships, and financial health remains under close scrutiny by industry observers and stakeholders.
Jun 29, 2026
Autovista has confirmed a ransomware infection affecting its systems in Europe and Australia, disrupting multiple customer-facing applications used by automotive-sector clients. The London-headquartered automotive data and analytics firm said impacted services include tools for residual value monitoring, market trend analysis, and total cost of ownership assessments, and that it has brought in external specialists to help contain and remediate the incident. The company said the investigation is still at an early stage and the initial intrusion vector remains unknown while third-party experts examine the root cause. Autovista has prioritized securely restoring affected applications but has not provided a recovery timeline, and it warned customers that some staff email access has been restricted, advising them to monitor its website for updates and use an alternative company email address for urgent contact.
Jun 29, 2026
**Advantest Corporation** reported a cybersecurity incident in which an unauthorized party appears to have accessed parts of its network and **deployed ransomware**, impacting certain internal systems. The company said it detected unusual activity on **Feb. 15 (JST)**, activated incident response procedures, **isolated affected systems**, and engaged third-party cybersecurity specialists to support investigation and containment; the investigation remains ongoing and findings may change as more facts are confirmed. Public reporting echoed Advantest’s statement that the scope and responsible ransomware group are **not yet identified**, and noted the broader trend of increased ransomware targeting of industrial and manufacturing organizations, including the semiconductor sector. Advantest stated it will provide updates and, if the investigation determines **customer or employee data** was affected, it will notify impacted individuals directly with guidance on protective measures.
Jun 29, 2026