Ransomware targets India's leading two-wheeler producer Bajaj Auto

Bajaj Auto, one of India’s largest producers of motorcycles and commercial vehicles, disclosed that it became the target of a ransomware attack that compromised systems across the parent company and its technology subsidiary, Bajaj Auto Technology Ltd.

The company detected the breach at approximately 8:00 AM Indian Standard Time on Tuesday, June 23, according to a regulatory filing. Bajaj Auto initiated immediate containment efforts following discovery of the intrusion, deploying internal technical teams alongside external cybersecurity experts and senior management to halt the attack’s spread and limit operational disruption. The company said these measures have so far succeeded in mitigating the incident’s impact.

Bajaj Auto formally notified the Indian Computer Emergency Response Team under India’s Information Technology Act of 2000 and disclosed the incident to securities regulators under SEBI Listing Obligations and Disclosure Requirements. The company characterized the disclosure as an exercise in corporate governance and regulatory transparency.

The scope of the breach remains unclear. Bajaj Auto has not disclosed whether sensitive data was stolen, whether manufacturing operations or supply chains sustained material damage, or the full extent of disruption to business continuity. No specific ransomware group or threat actor has been attributed to the attack, and the company indicated that further information would emerge as the investigation advances.

The incident marks the latest in a series of ransomware campaigns targeting industrial manufacturers and automotive companies across India and globally. For Bajaj Auto, which produces a significant portion of India’s two-wheeler market, any prolonged disruption to IT infrastructure could create cascading effects across supplier networks and production schedules.