Did TCS Really Lose $1 Billion M&S Contract Over Cyber Issues?
Synopsis
Key Takeaways
- TCS denies claims of losing a $1 billion contract with M&S over cybersecurity issues.
- The company calls the media report misleading and factually incorrect.
- M&S's decision to engage other partners was made prior to the cyber incident.
- The service desk contract is only a small part of TCS's overall partnership with M&S.
- TCS has confirmed no vulnerabilities were found in its systems concerning the cyberattack.
New Delhi, Oct 27 (NationPress) Tata Consultancy Services (TCS) has refuted a report from the UK media alleging that British retailer Marks & Spencer (M&S) terminated a $1 billion agreement with the Indian IT firm due to issues stemming from a cyberattack. The company labeled the article as “misleading” and “factually incorrect.”
In a statement to the stock exchanges, TCS highlighted that the piece titled “M&S ousts Indian outsourcer accused of £300m cyberattack failures” contained numerous inaccuracies, including the stated contract size and its association with the cyber incident.
According to TCS, “The report published is misleading, with factual inaccuracies including the size of the contract and the continuity of TCS’ work for Marks & Spencer (M&S),” said the tech giant.
TCS clarified that the service desk contract referenced in the report underwent a routine competitive tender process which commenced in January 2025.
Marks & Spencer opted to engage with alternative partners “much before the cyber incident in April 2025,” indicating that the two situations were “clearly unrelated.”
The IT company also pointed out that this service desk contract represented a minor component of its broader collaboration with M&S.
“TCS continues to contribute to various other domains in its capacity as a strategic ally for M&S and takes pride in this enduring partnership,”
the company asserted.
Regarding the cyberattack, TCS confirmed it had conducted a thorough examination of its systems and identified no vulnerabilities on its part.
Additionally, TCS mentioned that it does not provide cybersecurity services to M&S, as those responsibilities fall to a different vendor.
This clarification followed reports indicating that M&S chose not to renew its $1 billion technology helpdesk contract with TCS after a cyberattack that resulted in losses for the retailer amounting to approximately GBP 300 million.
Both companies have since verified that the decision regarding the contract was made prior to the incident and was part of a standard renewal process.