Kudankulam Nuclear Project Data Breach Exposes Cybersecurity Weaknesses

• •The Kudankulam breach involved the leak of 19,000 files on the dark web.
• •Data was stored on a third-party server managed by Yotta, which had prior ransomware activity.
• •NPCIL confirmed that the leaked information was non-nuclear and unrelated to safety systems.

In July 2026, a significant data breach involving the Kudankulam nuclear power project was reported, with nearly 19,000 files leaked on the dark web by the group World Leaks. The breach, confirmed by Reliance Infrastructure, involved sensitive documents stored on a third-party server managed by Yotta, which had previously experienced ransomware activity. The leaked data includes engineering drawings and inspection records from 2016 to 2025, but the Nuclear Power Corporation of India Limited (NPCIL) stated that the information was non-nuclear and unrelated to safety systems. This incident raises concerns about the cybersecurity of critical infrastructure, particularly regarding data held by contractors and service providers. Previous incidents, such as the Dtrack malware found in 2019, highlight ongoing vulnerabilities at Kudankulam. The breach has not been linked to any immediate threat to nuclear safety, but it emphasizes the need for improved cybersecurity measures beyond physical facility boundaries.