Overview
- Ransomware group World Leaks posted a dark‑web cache that it says includes about 19,000 files tied to the Kudankulam project as part of a larger set of roughly 858,000 Reliance‑linked files.
- Reliance Group confirmed a partial breach of data held on a server managed by third‑party provider Yotta and said it informed authorities while Yotta says it detected and stopped suspicious activity on May 29.
- India’s Nuclear Power Corporation (NPCIL) and the national cyber agency CERT‑In are examining the incident and say the material appears to concern Balance of Plant common services rather than reactor core or nuclear‑safety systems.
- Security experts warn that blueprints, vendor lists, inspection reports and insurance records in the leak could help hostile actors map support systems, identify suppliers and expose supply‑chain and site vulnerabilities even if core reactor controls were untouched.
- Investigations will focus on third‑party and contractor networks, possible verification of the files’ authenticity, and whether the breach requires design or security changes for Units 3 and 4, which are under construction and expected to enter service around 2027.