Bajaj Auto hit by ransomware, says it contained the attack
The two-wheeler major suffered a cyber attack on 23 June 2026 but reports no operational disruption or data loss; CERT-In notified.
What's new
- Ransomware attack on Bajaj Auto and its subsidiary on 23 June 2026
- Prompt mitigation by internal team and external experts, no disruption or data loss disclosed
- Incident reported to CERT-In as per IT Act
Why this matters
For a company valued at ₹2.85 lakh crore, a contained cyber incident without quantifiable damage is unlikely to affect equity valuation. Early containment and no reported downtime or data exfiltration limit potential market impact, though the incident points to the persistent threat landscape for large-cap automakers.
What we're watching
- Any subsequent disclosures on data loss or operational impact
- Industry-wide cyber resilience trends post-attack
- Regulatory follow-up from CERT-In
The full read
Bajaj Auto and its subsidiary Bajaj Auto Technology Limited were hit by a ransomware attack on the morning of 23 June 2026. The company's internal team and external experts sprang into action and contained the attack quickly. No details of operational disruption or data loss have been disclosed, and the incident was reported to CERT-In. For a company valued at ₹2.85 lakh crore with a trailing P/E of 26.1 and low debt of 0.27 times equity, this contained event is unlikely to move the stock. The open question is whether any hidden fallout emerges, but so far the narrative is one of mitigation success rather than systemic failure.
Questions answered
- What exactly happened in the ransomware attack on Bajaj Auto?
- Bajaj Auto and its wholly owned subsidiary, Bajaj Auto Technology Limited, faced a ransomware attack on the morning of 23 June 2026. The company's technical team and external cyber security experts responded immediately and mitigated the impact.
- Was there any operational disruption or data loss?
- The company has not disclosed any details of operational disruption or data loss. The filing states the attack was successfully mitigated based on information available at the time.
- Has the incident been reported to the authorities?
- Yes, the incident has been reported to CERT-In as required under the Information Technology Act.
- How significant is this for Bajaj Auto's business and stock?
- Given the early containment and no reported financial loss or downtime, the incident is not considered material for a large-cap company like Bajaj Auto. Market impact is expected to be limited.
- Should investors be concerned about future cyber risks?
- While this incident was contained, cyber attacks are an ongoing risk for all companies. Bajaj Auto's swift response suggests adequate preparedness, but investors should monitor any future disclosures.