Files Related to India's Largest Nuclear Plant Contractor Surface on Dark Web
Thousands of files linked to India's largest nuclear power plant, Kudankulam, have appeared on the dark web. A ransomware group claims to have breached systems belonging to one of the project's contractors.
Thousands of files reportedly connected to India's largest nuclear power facility, the Kudankulam Nuclear Power Plant, have surfaced on the dark web. The ransomware group World Leaks published nearly 19,000 files alleged to be related to the plant.
The leaked data is said to include blueprints of parts of the facility, supplier details, inspection records, and insurance documents. The files were reportedly sourced from Anil Ambani-led Reliance Group, which secured a contract in 2018 to design and build infrastructure for Units 3 and 4 of the plant.
Reliance Group informed Inc42 of a "partial breach" involving data on a server hosted by third-party provider Yotta. Yotta stated it detected suspicious activity and terminated it immediately, claiming "no ransomware execution, data loss, or lateral movement occurred" and services were restored.
The incident has been reported to India's Computer Emergency Response Team (CERT-In). This is not the first cybersecurity incident linked to the Kudankulam plant; in 2019, malware associated with a North Korean hacker group was detected on the plant's administrative network.