Tata Consultancy Services (TCS) has issued a strong denial regarding a report by The Telegraph newspaper in the UK, which alleged that Marks & Spencer (M&S) terminated a significant contract with TCS due to failures in preventing a cyberattack. TCS stated that the report is misleading and contains factual inaccuracies, particularly concerning the size of the contract and the continuity of its engagement with M&S. According to TCS, the service desk contract with M&S followed a standard competitive Request for Proposal (RFP) process initiated in January 2025, and M&S had already decided to proceed with other partners well before the cyber incident that occurred in April 2025.
TCS emphasized that these events are unrelated. The company also pointed out that the commercial aspect of the service desk engagement represents a minor part of its overall relationship with M&S, and TCS continues to serve M&S as a strategic partner in numerous other areas. Furthermore, TCS clarified that it does not provide cybersecurity services to M&S; this is handled by another partner. TCS had previously stated that its own network scans did not show the vulnerabilities originating from its systems.
Impact:
This clarification is important for investor confidence as it corrects potentially damaging misinformation. By refuting the report directly and providing factual context, TCS aims to protect its reputation and stock value. The market will likely view this positively, mitigating concerns about contract loss and cyber liabilities. Rating: 7/10
Difficult Terms Explained:
RFP (Request for Proposal): A formal document issued by an organization to potential suppliers, inviting them to submit a proposal for a specific project or service.
Cyber incident: An event that disrupts or threatens the security of an information system or network.
Vulnerabilities: Weaknesses in an information system, security procedures, internal controls, or implementation that could be exploited by a threat actor.