TCS Refutes Claims of Contract Loss Following M&S Cyber Incident

Tata Consultancy Services (TCS) clarified that it continues to manage the service desk operations for Marks & Spencer (M&S), refuting claims that its contract was terminated in the aftermath of a recent cyber incident that affected the retailer’s digital infrastructure.

 

On April 22, Marks & Spencer (M&S), the British multinational retailer, experienced a severe cyberattack that disrupted its business operations across multiple channels. The company anticipates an operating profit reduction of up to £300 million for the 2025–2026 financial year as a result. 

 

According to The Telegraph, Marks & Spencer concluded its ten-year partnership with Tata Consultancy Services (TCS), the Mumbai-headquartered IT services firm belonging to the Tata Sons group, in July. TCS, however, conducted an internal review in June and found no evidence linking its systems to the cyber incident. 

 

M&S also did not indicate that the conclusion of the contract was related to the breach, clarifying that the transition stemmed from a scheduled renewal process that commenced in January.

 

In a regulatory filing, TCS has refuted the claims of the media house, stating that the article is “misleading” and pointed to “factual inaccuracies.”

 

“In response to the article published by ‘The Telegraph’ Newspaper in the UK on October 26, 2025, titled “M&S ousts Indian outsourcer accused of £300m cyberattack failures, a statement of the Company is given below:

 

“The report published by The Telegraph is misleading, with factual inaccuracies including the size of the contract and the continuity of TCS’ work for Marks & Spencer (M&S). As both M&S and TCS have clarified, the service desk contract with M&S followed a regular competitive RFP process initiated in January 2025, with M&S opting to proceed with other partners much prior to the cyber incident in April 2025. These matters are hence clearly unrelated,” reads the filing.

 

TCS added that it remains a strategic partner to M&S across several areas and that the company does not provide cyber security services for M&S.