A ransomware group known as World Leaks has allegedly published sensitive data related to India’s largest nuclear power plant on the dark web. The Kudankulam Nuclear Data Leak reportedly includes documents connected to the Kudankulam Nuclear Power Plant in Tamil Nadu, raising fresh concerns about cybersecurity and critical infrastructure protection.
According to Reuters, the leaked files allegedly contain facility layouts, supplier information, meeting records, inspection reports, equipment assessments, and insurance documents. The hackers claimed the data was obtained through a breach involving the Reliance Group. Reliance confirmed that there had been a partial intrusion into its data hosted on a third-party server but did not specify which files were affected.
The Kudankulam Nuclear Power Plant is India’s largest nuclear facility and plays a key role in the country’s plans to expand nuclear energy capacity. Reliance Infrastructure, a subsidiary of the Reliance Group, was awarded the contract in 2018 to design and build infrastructure for Units 3 and 4, which are expected to become operational by 2027 with a combined capacity of 2,000 megawatts.
Cybersecurity experts warned that while the leaked documents do not appear to include information about the core reactor systems, they reportedly contain details about ventilation and cooling systems, a control room layout, approved suppliers, and joint inspection records. Experts say such information could still pose security risks if misused.
Reuters reported that around 858,000 files were leaked, with approximately 19,000 documents believed to be highly sensitive. World Leaks, which has previously targeted major companies including Nike and the Tata Group, is known for publishing stolen data when ransom demands are not met. The Kudankulam Nuclear Data Leak has intensified concerns over the cybersecurity of critical national infrastructure and the protection of sensitive industrial information.