Cybercriminals published sensitive blueprints from India's largest nuclear plant

Ransomware syndicate World Leaks released thousands of confidential files related to the Kudankulam Nuclear Power Plant on the dark web. Hackers claim they extracted this sensitive data cache from servers belonging to Anil Ambani’s Reliance Group. Exposed documents include proposed blueprints for ventilation systems, cooling infrastructure, and floor layouts for future unit expansions. Reliance Infrastructure confirmed a partial server breach handled by third-party hosting service Yotta. Energy security remains a critical focus for developing coastal states like Odisha, making national cyber resilience essential to protect regional power grids from cascading infrastructural failures.

Evaluating Cyber Vulnerabilities

Experts warn this information leak introduces serious safety risks. Malicious actors could theoretically map vital support systems or exploit supplier weaknesses. Core reactor systems supplied by Russia's Rosatom appear secure from this specific breach. However, the exposed documentation features high-value targets like insurance policies, vendor proposals, and joint inspection records.

Yotta identified suspicious server activity in late May and stopped the suspected ransomware execution. Reliance Infrastructure later reported that external threat actors still managed to steal data before the shutdown.

Reliance Infrastructure won contracts in 2018 to build infrastructure for Unit 3 and Unit 4. These units are expected to generate combined capacities of 2,000 megawatts by 2027. The leaked cache reportedly contained 19,000 highly sensitive files out of a much larger compromised collection.

Authorities Investigate Escalating Threats

National security teams are actively investigating the security failure. The Indian Computer Emergency Response Team and the Nuclear Power Corporation of India are coordinating a rapid response. World Leaks regularly targets corporate entities, recently demanding millions after stealing confidential designs from other major Indian firms.

This incident marks the second known cyber event involving Kudankulam facilities. A previous malware infiltration linked to North Korean hackers struck the administrative network back in 2019. India currently ranks as one of the most targeted countries globally for data breaches, highlighting an urgent need for stronger digital hygiene across critical infrastructure contractors.