Bajaj Auto hit by ransomware attack, operations unaffected - Introduction

Bajaj Auto has disclosed that it was hit by a ransomware attack on June 23, affecting its own systems as well as those of its wholly owned subsidiary, Bajaj Auto Technology Ltd. The attack occurred at around 8am IST, and the company said its technical teams, management and external cybersecurity experts immediately activated precautionary measures and response protocols to contain the breach.

In a regulatory filing, Bajaj Auto said the precautionary measures activated in response to the attack had so far been successful. The company has reported the incident to the Indian Computer Emergency Response Team (CERT-In), as mandated under applicable regulations, and made the disclosure under Regulation 30 of the Securities and Exchange Board of India’s Listing Obligations and Disclosure Requirements, 2015.

Bajaj Auto has not disclosed the nature of the ransomware involved or whether any data was compromised.

The incident is the latest in a pattern of cyberattacks targeting automotive and industrial companies globally. As vehicle manufacturers become increasingly dependent on enterprise software for production scheduling, inventory management, dealer coordination and product development, the potential impact of a successful breach has grown considerably. Ransomware groups are increasingly targeting manufacturing companies, given that production stoppages can translate rapidly into significant financial losses.

Late last year, Jaguar Land Rover was hit by a cyberattack that forced the company to suspend production for nearly six weeks. The disruption is estimated to have cost JLR around GBP 1.5 billion in lost revenue.