Tata Consultancy Services (TCS) has said it was not involved in the major cyberattack that hit Marks & Spencer earlier this year, which led to the theft of customer data and widespread disruption across the retailer’s operations.

Speaking at the company’s annual shareholder meeting this week, according to Reuters, TCS independent director Keki Mistry stated: “As no TCS systems or users were compromised, none of our other customers are impacted”

He confirmed the IT giant, which has worked with the high street retailer for more than a decade, is not part of the investigation currently being carried out by the retailer.

“The purview of the investigation does not include TCS,” he added.

Subscribe to Grocery Gazette for free

Sign up here to get the latest grocery and food news each morning

The comments are TCS’s first public response since the cyberattack on M&S, which has been described as “highly sophisticated and targeted”.

The attack is expected to cost M&S an estimated £300m in lost operating profit, with online operations disrupted for several weeks.

TCS is one of the main technology suppliers to M&S and was reportedly awarded a $1bn contract in 2023 to modernise the retailer’s supply chain systems and boost digital sales.

In May, the Financial Times reported that TCS had launched its own internal investigation into whether its systems may have been used to gain access.

But Mistry’s comments appear to confirm that no breach occurred within TCS infrastructure. M&S has not commented on TCS’s statement, but has said previously it expects to fully restore all online functionality by July.