Bajaj Auto announced on Tuesday that a ransomware attack impacted its systems and those of its wholly owned subsidiary, Bajaj Auto Technology Ltd (BATL). The company has activated response protocols and implemented precautionary measures to contain the incident.

According to Reuters, the Pune-based two- and three-wheeler manufacturer reported that an attack earlier in the day affected systems at both Bajaj Auto and BATL. The company stated that mitigation efforts have been successful so far but did not disclose the extent of the disruption, which systems were affected, whether production was impacted, or whether any data was accessed or stolen.

What the company disclosed: Bajaj Auto stated that it has implemented “necessary precautionary actions and protocols” to mitigate the ransomware attack. The company said these measures have been effective in managing the incident so far.

The disclosure shows that the company classified the incident as a cybersecurity event requiring immediate containment. However, the statement did not specify the type of ransomware involved, the identity of the attackers, whether a ransom demand was made, or whether law enforcement or government cybersecurity agencies were notified.

The incident affected both Bajaj Auto’s systems and those of its technology subsidiary, BATL. The subsidiary’s involvement is significant because technology units support critical internal systems and operational infrastructure.

Regulatory notifications filed: In compliance with Indian cybersecurity regulations, Bajaj Auto formally notified the Indian Computer Emergency Response Team (CERT-In) under the provisions of the Information Technology Act, 2000. The disclosure was also made under Regulation 30 of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015.

Key questions remain unanswered: Bajaj Auto has not confirmed whether the attack affected manufacturing operations, supply-chain systems, dealer networks, employee access, customer-facing platforms, or financial processes.

The company has not specified whether sensitive data was encrypted, copied, or exposed. In many ransomware incidents, attackers lock systems and may threaten to leak stolen data. Currently, there is no public confirmation that Bajaj Auto’s data has been stolen or leaked.

The company’s statement does not clarify whether all affected systems have been restored or whether recovery efforts are ongoing. While the wording suggests that the immediate impact has been contained, it does not confirm that the incident has been fully resolved.

What Remains Unknown

• Which ransomware group or threat actor carried out the attack?
• Whether data was exfiltrated before encryption.
• Whether a ransom demand was made or is being negotiated.
• The extent to which production lines or supply logistics were disrupted.
• The estimated cost of the incident.

Why this matters: The attack also affected BATL, the company’s technology division responsible for software and digital infrastructure. The incident raises concerns about the security of proprietary product, engineering, and operational data, although the company has not commented on whether any such information was compromised.

Read more:

• Tata Technologies Reports Ransomware Attack, says IT Assets Affected
• India Faced 370 Million Malware, 1 Million Ransomware Incidents in 2024: Report
• Bombay HC Tells DoT to Block Medusa Accounts After Generali Insurance Data Breach