Welspun loses critical data, FIR filed

Mumbai police file FIR after Welspun Living data breach causing significant loss. The complaint states that dashboards used by the firm have gone missing

MUMBAI: The NM Joshi Marg police on Thursday registered a first information report (FIR) regarding the deletion of confidential data, dashboard and daily reports of textile firm Welspun Living Limited. The FIR was filed after an internal enquiry by the company revealed that someone had misused the mail ID my_cfo@welpsun.com, a common account which was created by the company for its third party IT service vendors to support development of dashboard on Power BI capital, the complaint said.

HT Image

“We have registered a case based on the complaint of Sandeep Kumar Jha, 36, a resident of Wadala, who works as assistant general manager, IT, with Welspun Living,” said a police officer.

According to the complaint, Welspun Living, which has its registered office at Welspun House, Kamala Mills, Lower Parel, uses SAP Enterprise Resource Planning software to store its financial and operational data; and Microsoft Powe BI software to store its sales reports, plant reports, and inventory reports.

The complaint states that several dashboards and data are missing from the system.

“The company conducted an enquiry with the Microsoft team after that, which found that on January 17, in the evening, somebody had logged in from Hyderabad using the [common] email ID and deleted the dashboards,” the police officer mentioned. As per the FIR, only Power BI dashboard data was deleted, which the company says it has recovered and added that no other company data was impacted.

The unknown accused in the case have been booked under section 420 (cheating) of the Indian Penal Code and sections 43(d) (damage or causing damage), 43A (failure to protect data), 65 (tampering with computer resources) and 66D (cheating by personation by using computer resource) of the Information Technology Act, 2000.