NEW DELHI: A ransomware group has published what it claims is sensitive data related to India’s Kudankulam Nuclear Power Plant, the country’s largest nuclear facility, raising cybersecurity concerns over critical infrastructure.
According to Reuters, the ransomware group World Leaks posted a large cache of files on the dark web, including what appear to be facility layouts, supplier information, inspection records and engineering documents. The group claimed the data was obtained through a breach involving Reliance Infrastructure, which is involved in construction work at the plant.
Reliance said in a statement that data stored on servers operated by data center provider Yotta had been partially compromised and that the incident had been reported to the Indian government.
The company did not specify what information, if any, had been affected or confirm that the leaked files were authentic.
Reuters reported that more than 858,000 files were allegedly obtained, with around 19,000 considered potentially sensitive.
The documents reportedly include ventilation and cooling system plans for Units 3 and 4, supplier proposals, approved vendor lists, inspection records and insurance documents. The published files do not appear to include information on the reactors’ core operating systems.
Cybersecurity experts warned that even if the leaked material does not expose reactor controls, it could still provide valuable intelligence about the plant’s supporting infrastructure and supply chain. Nicholas Roth, senior director at the Nuclear Threat Initiative, said such information could help attackers identify vulnerabilities within critical systems.
Kudankulam Nuclear Power Plant, located in the southern Indian state of Tamil Nadu, is the largest of India’s seven nuclear power stations and a key part of the country’s plan to expand nuclear energy generation. Units 3 and 4, currently under construction, are expected to begin operations in 2027 with a combined capacity of 2,000 megawatts.
World Leaks has previously claimed responsibility for cyberattacks targeting major companies, including Nike and Tata Group, and typically publishes stolen data after ransom demands are rejected. The authenticity and full scope of the leaked documents related to Kudankulam have not been independently verified.