Firstpost Data Breach Exposes Sensitive Files from Kudankulam Nuclear Plant
Article Content
- •World Leaks leaked 19,000 files from the Kudankulam Nuclear Power Plant on the dark web.
- •Reliance Group confirmed a 'partial breach' from a server hosted by Yotta.
- •NPCIL stated that no sensitive nuclear information was compromised, but risks remain.
In July 2026, the ransomware group World Leaks leaked approximately 19,000 files related to India's Kudankulam Nuclear Power Plant on the dark web. The data, allegedly sourced from Reliance Group, includes blueprints, supplier details, and inspection records. Reliance confirmed a 'partial breach' occurred on a server managed by third-party provider Yotta. The leaked documents date from 2016 to mid-2025 and are part of a larger cache of 858,000 files. While the Nuclear Power Corporation of India (NPCIL) denied any sensitive nuclear data was compromised, experts warn that the exposed information could assist hostile actors in planning cyber or physical attacks. Investigations are ongoing by NPCIL and India's Computer Emergency Response Team (CERT-In). The breach raises significant concerns about cybersecurity in critical infrastructure.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (57)
Following this threat?
Track World Leaks and Apple in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical Zero-Day Exploit in BeyondTrust Remote Support Disclosed BeyondTrust disclosed a critical vulnerability, CVE-2026-102764, in its Remote Support product, exploited by the suspected China-linked group ARMORY CASTLE. The flaw, with a CVSS score of 9.3, allows attackers to perform arbitrary file uploads and gain host-level control without requiring credentials or user…
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…