Bajaj Auto Limited

Summary

Bajaj Auto disclosed a ransomware attack affecting systems at the parent company and its wholly owned technology subsidiary. The intrusion was detected in the morning IST, prompting response from internal technical staff, external cybersecurity experts, and senior management. The company said precautionary actions and containment protocols had reduced the impact, but it did not disclose the full scope of disruption, including whether data was stolen, manufacturing was affected, supply chain systems were disrupted, or business continuity was materially impacted. It notified the Indian Computer Emergency Response Team and made a regulatory disclosure under SEBI listing requirements. No ransomware group or threat actor has been attributed to the attack.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

Bajaj Auto disclosed that it was affected by a ransomware attack involving systems at both the parent company and its wholly owned technology subsidiary, Bajaj Auto Technology Ltd. The incident was detected at approximately 8:00 AM IST on June 23, 2026. The company confirmed the breach in a regulatory filing and stated that the attack affected its IT infrastructure as well as BATL’s systems. After detecting the intrusion, Bajaj Auto’s internal technical team, external cybersecurity experts, and senior management began responding to the incident. The company initiated precautionary actions and protocols intended to reduce the impact of the attack. Bajaj Auto said its containment efforts had so far been successful in mitigating the impact.

The company formally notified the Indian Computer Emergency Response Team under India’s Information Technology Act, 2000. It also disclosed the incident under Regulation 30 of the SEBI Listing Obligations and Disclosure Requirements Regulations, 2015. No ransomware group or threat actor had been attributed to the attack at the time of the disclosure. Bajaj Auto did not disclose the full scope of the disruption. The company had not stated whether sensitive data was stolen. It had not confirmed whether manufacturing operations were affected. It had also not said whether supply chain systems were disrupted or whether business continuity was materially impacted. The confirmed impact therefore remained limited to the reported effect on Bajaj Auto’s IT infrastructure and BATL’s systems, along with the company’s containment and regulatory response actions.

Sources

Sources available to members: 1 source.