A major cybersecurity Breach concern has emerged after ransomware group World Leaks claimed it had published more than 19,000 files related to India’s Kudankulam Nuclear Power Plant on the dark web. According to the hackers, the leaked files are part of a much larger dataset containing over 858,000 documents, allegedly obtained through a third-party contractor. While the claims have sparked fresh concerns over the cybersecurity of India’s critical infrastructure, government agencies have not yet verified the authenticity of the leaked data.
Reports suggest the alleged documents include engineering blueprints, ventilation and cooling system layouts, common control room floor plans, equipment inspection reports, supplier lists, vendor proposals, meeting records, and insurance documents, primarily linked to Units 3 and 4 of the Kudankulam project, which are currently under construction. However, there is no official indication that sensitive reactor core designs or operational control systems have been compromised.
Reliance Group has acknowledged that unauthorized access was detected on servers operated by third-party data center provider Yotta, though it has not disclosed the nature of the affected data. The company stated that the incident has been reported to the relevant government authorities. Cybersecurity experts warn that even if core nuclear systems remain secure, the exposure of supporting infrastructure and operational documents could help attackers identify vulnerabilities for future cyber or physical threats.
India’s CERT-In and the Nuclear Power Corporation of India Limited (NPCIL) are currently investigating the incident. Officials say there is no evidence so far that the operation of any active nuclear reactor has been affected. The case highlights the growing cybersecurity challenges facing critical sectors such as energy, defense, banking, and telecommunications, reinforcing the need for stronger cyber resilience and continuous security upgrades across the country’s strategic infrastructure.
