India Nuclear Plant Data Breach: Blueprints, Supplier Details Exposed
At a glance
- A ransomware group, World Leaks, has published thousands of files allegedly from India's Kudankulam Nuclear Power Plant.
- The leaked data reportedly includes blueprints and supplier details, originating from contractor Reliance Group.
- Reliance Group confirmed a partial data breach and informed the government, though specific breached data was not disclosed.
Story so far
Indian authorities are investigating a reported cybersecurity incident after a ransomware group, known as World Leaks, claimed to have released thousands of files allegedly connected to the Kudankulam Nuclear Power Plant, the country’s largest nuclear energy facility. The cybercriminal group stated it has published over 19,000 files on the dark web. These documents are said to be part of a much larger dataset of approximately 858,000 files allegedly taken from Reliance Group, a contractor involved in the Kudankulam project.
Latest development
The ransomware group World Leaks has posted a large cache of files, including purported blueprints and supplier details, allegedly from India's Kudankulam Nuclear Power Plant, on the dark web. Reliance Group, a contractor, confirmed a partial data breach and informed the government.
Latest updates
The ransomware group World Leaks has posted a large cache of files on the dark web, which it claims are related to India’s largest nuclear plant, the Kudankulam Nuclear Power Plant. These files reportedly include purported blueprints of parts of its facilities and supplier details, labeled as originating from Reliance Group. The Kudankulam plant is central to Prime Minister Narendra Modi’s plans to expand India’s atomic energy capacity.
Reliance Group, a contractor for the plant, confirmed to Reuters a "partial breach" of its data on a server hosted by third-party provider Yotta, and stated that the government had been informed. However, Reliance did not disclose the specific data that was breached. Nickolas Roth, a senior director at the Nuclear Threat Initiative, suggested the breach could pose a "serious" risk to the plant's safety. Reuters reviewed the documents, dated from 2016 to mid-2025, but could not verify their authenticity. The 19,000 files released are considered the most sensitive out of a total of 858,000 Reliance files on the World Leaks website. Reliance Infrastructure, a subsidiary, secured a contract in 2018 for Units 3 and 4, which are under construction and expected to be operational by 2027, providing a combined 2,000 megawatts of capacity. World Leaks, known for targeting companies like Nike and Tata Group, typically publishes stolen data when ransom demands are not met.
Responses