Breaches and incidents
Kudankulam Nuclear Power Project / NPCIL (India): 19,000 project files leaked via contractor Reliance Infrastructure breach
World Leaks posted 18,997 files (about 14.3 GB) tagged to Kudankulam, part of a 1.2 TB Reliance Infrastructure dataset, reportedly available on its leak...
- Disclosed
- Verification
- Confirmed by two or more outlets
What happened
- World Leaks posted 18,997 files (about 14.3 GB) tagged to Kudankulam, part of a 1.2 TB Reliance Infrastructure dataset, reportedly available on its leak site since 11 Jun; contents reportedly include employee data, tenders, vendor details, emails, technical specifications and equipment layout drawings, including material for Units 3 and 4 (GovInfoSecurity, Business Today).
- Root cause: compromise of a Reliance Infrastructure server hosted by Yotta Data Services; Reliance confirmed a “partial breach”; Yotta told Reuters it detected suspicious activity in May and contained it before encryption. Initial access not disclosed.
- Attacker: World Leaks (extortion group, rebrand of Hunters International), per researchers.
- Response: NPCIL said the material concerns conventional balance-of-plant facilities, not reactor operations, nuclear safety or security systems; researcher Rakesh Krishnan found no evidence of OT compromise.