A hacker has claimed to possess data relating to thousands of current and former employees of Piramal Group, an Indian conglomerate operating in various sectors. The hacker reportedly listed a portion of the stolen data on a cybercrime forum, including full names and email addresses. This data breach could potentially be exploited by cybercriminals for targeted attacks against the employees. Piramal Group, however, denies any data breach and suggests that the data may have been sourced from a third party. The company conducted a thorough investigation and found no evidence of a breach on its systems. The authenticity and origin of the data are still under investigation.
Piramal Group has not disclosed the name of the third-party platform involved. The company’s spokesperson did not provide details on how Piramal determined that no data breach had occurred or whether they have the technical capabilities to detect data exfiltration.
Piramal confirmed that it received a query from India’s computer emergency response team, CERT-In, regarding the data breach incident. After conducting a thorough investigation, Piramal informed CERT-In that no data breach had occurred on their systems and no information had been compromised.