In an exchange filing, HCLTech said its initial investigation found the data "may be limited and dated to a few years back." The company said there was no evidence of a breach of its systems, and no indication that any client engagement was affected.