Rising Cybersecurity Attacks Highlight Vulnerabilities of Indian Companies as They Digitise Operations

A cybersecurity incident at Suzuki Motorcycle India forced the company to halt production in May.

By Alex Gabriel Simon, Bloomberg | Updated: 6 July 2023 11:36 IST

Highlights

As per a CERT-In report, Ransomware attacks rose 53 percent in 2022
Some firms are taking steps to reduce vulnerabilities
India is pushing to become a global force in electronics manufacturing

Rising Cybersecurity Attacks Highlight Vulnerabilities of Indian Companies as They Digitise Operations

The increase in high-profile incidents has boosted demand for security software

Photo Credit: Reuters

A rise in cyberattacks poses a vital risk to India's economic ambitions, with industries from manufacturing to pharmaceuticals becoming more vulnerable as they digitise operations, according to a Google subsidiary. Attacks have spiked significantly in the past six months, said Amit Pradhan, India consulting leader for the cybersecurity firm Mandiant, which is owned by Alphabet's Google Cloud. A breach at Suzuki Motorcycle India forced the company to halt production in May, and India's largest drugmaker said in March a ransomware attack will have an impact on revenue.

“Every company in India wants to go digital,” Pradhan said. “The risks are also rising with it.”

The breaches underscore how companies in the world's most populous nation may have neglected cybersecurity as they've rapidly built out their digital infrastructure. India is aggressively pushing to become a global force in industries such as electronics manufacturing and an alternative to China, which has lost some of its allure as the world's factory amid tensions with the US.

TSMC Hardware Supplier Targeted in Cyberattack: All Details

Ransomware attacks, where a hacker encrypts files and demands a ransom payment, rose 53 percent in India in 2022, according to a report by CERT-In, the country's agency for cyberthreats. Ransomware groups have broadened their attacks across critical sectors, according to the report.

The increase in high-profile incidents has boosted demand for security software. Companies are now approaching Mandiant not just during emergencies but also to implement preventive measures, Pradhan said. Yet budget constraints mean that Indian companies are still spending less on protection than their counterparts in many other regions.

“The country is far behind developed nations when it comes to the importance given to cybersecurity,” Pradhan said.

Why Hackers Are Threatening to Leak 80GB of Data Stolen From Reddit

To be sure, some firms are taking steps to reduce vulnerabilities. L&T is planning to increase spending on cybersecurity by as much as 50 percent next year, according to Chief Operating Officer Abhishek Sinha. He said the company is moving to a “zero-trust architecture” where it restricts employees' and vendors' access to only the data they need.

The growing popularity of artificial intelligence is proving to be both a boon and a bane, cybersecurity experts said. Security software companies such as Crowdstrike Holdings Inc. are using AI to detect loopholes in IT systems. But on the other hand, hackers are using ChatGPT and other tools to write malware code and convincing phishing emails, said Smit Kotadiya, a CrowdStrike consultant.

“There used to be grammatical errors that we could spot in phishing emails,” Kotadiya said. “Hackers are now smarter than ever before.”

Is the Xiaomi Pad 6 the best Android tablet you can buy under Rs. 30,000 in India? We discuss the company's latest mid-range tablet on the latest episode of Orbital, the Gadgets 360 podcast. Orbital is available on Spotify, Gaana, JioSaavn, Google Podcasts, Apple Podcasts, Amazon Music and wherever you get your podcasts.