Nearly 19,000 Files Tied to India’s Kudankulam Nuclear Plant Leaked Online

A ransomware group has published files linked to India’s Kudankulam Nuclear Power Plant, the country’s largest atomic facility, exposing what appear to be blueprints, supplier records and insurance details tied to contractor Reliance Group.

Breach Confirmed by Contractor

World Leaks posted the files on the dark web, claiming they came from Reliance Group, run by businessman Anil Ambani. Reliance confirmed a partial breach of data hosted on a server managed by provider Yotta and said the government has been informed, though it hasn’t detailed what exactly was exposed.

Scale of the Leak

Researcher Rakesh Krishnan, who first spotted the leak, said nearly 19,000 files totaling over 14 gigabytes have been online since June 11, part of a larger set of 858,000 Reliance-linked files. Documents reportedly include cooling system blueprints for under-construction Units 3 and 4, a control room layout, supplier lists and a $112 million terrorism insurance policy.

Experts Flag Security Risks

Nickolas Roth of the Nuclear Threat Initiative said the data could pose a serious safety risk, potentially helping bad actors map the plant’s systems and suppliers. The leak doesn’t appear to involve core reactor systems built by Russia’s Rosatom. It’s the second cyber incident tied to Kudankulam, following a 2019 case involving North Korean-linked malware.