Skip to content
Cyber Breaches
Search
RansomwareContained

Bajaj Auto hit by ransomware attack on its IT systems

Indian automaker Bajaj Auto disclosed that a ransomware attack detected on the morning of 23 June 2026 affected systems at the company and its technology subsidiary, prompting containment measures and regulatory filings with CERT-In and SEBI.

Victim
Bajaj Auto
SectorManufacturing
CountryIndia
Threat actorUnknown

On 23 June 2026, Bajaj Auto — one of India's largest motorcycle and three-wheeler manufacturers — disclosed that it had been hit by a ransomware attack affecting its information-technology systems. The company said the intrusion was detected at around 08:00 IST and that it impacted systems at both Bajaj Auto Limited and its wholly owned technology subsidiary, Bajaj Auto Technology Limited (BATL).

What happened

Upon detecting the activity, Bajaj Auto's internal technical teams — working alongside external cybersecurity specialists and senior management — moved to contain and neutralise the threat, activating incident-response procedures and precautionary measures to limit the spread of the ransomware. The company stated that, based on the information available at the time, its mitigation efforts had been successful and that systems were being restored.

Bajaj Auto did not name a ransomware group or attribute the attack to any specific threat actor, and as of disclosure it had not confirmed whether any data was accessed or exfiltrated, nor detailed which specific systems were affected.

Regulatory response

The company notified the Indian Computer Emergency Response Team (CERT-In) of the incident under the applicable provisions of the Information Technology Act, 2000, and disclosed the matter to investors under Regulation 30 of the SEBI (Listing Obligations and Disclosure Requirements) Regulations, 2015, the framework that requires listed Indian firms to report material events.

Impact

Bajaj Auto did not quantify the operational disruption or confirm whether manufacturing, supply chains, or business continuity were materially affected. The incident nonetheless underscored the growing exposure of large Indian manufacturers to ransomware, coming amid a wave of extortion campaigns targeting industrial and automotive supply chains.

Timeline

  1. Bajaj Auto detects a ransomware intrusion at approximately 08:00 IST affecting its systems and those of its technology subsidiary, and activates containment protocols.

  2. The company confirms the incident publicly, reports it to CERT-In and discloses it to investors under SEBI listing rules, stating mitigation has been successful.

Sources

  1. cybersecuritynews.comhttps://cybersecuritynews.com/bajaj-ransomware-attack/
  2. securityboulevard.comhttps://securityboulevard.com/2026/06/bajaj-auto-confirms-systems-affected-by-ransomware-attack/
  3. medianama.comhttps://www.medianama.com/2026/06/223-bajaj-auto-systems-hit-by-ransomware/
  4. businesstoday.inhttps://www.businesstoday.in/auto/story/what-bajaj-auto-ransomware-attack-says-about-cyber-security-risks-for-indian-automakers-538956-2026-06-24
  5. moneylife.inhttps://moneylife.in/article/bajaj-auto-hit-by-ransomware-attack/80873.html

Related incidents