World Leaks, a ransomware organization has published a large collection of documents related to India’s Kudankulam Nuclear Power Plant on the dark web. For your information, the plant is situated in the southern Indian state of Tamil Nadu. The nuclear plant is also the biggest among the country’s 7 nuclear plants. The former has a major role in the Indian government’s aim to expand the nation’s atomic energy capability.

Breach Occurred at a Supplier not the Main Plant

Allegedly, blueprints of some of the plant’s facilities as well as supplier related data were leaked. World Leaks stated that the leaked files originated from the Reliance Group. Later the Nuclear Power Corporation of India stated that the data breach did not contain any sensitive data regarding nuclear security. Indian business tycoon Anil Ambani, owner of the Reliance Group declared the occurrence of a partial breach of its information on a server belonging to Indian data center service provider Yotta. The former also stated that the Indian government had been intimated regarding the incident.

Probability of Damage

According to Nickolas Roth, a senior director of the Nuclear Threat Initiative that guides governments and assesses nuclear security the reported data breach may become a serious risk to the nuclear plant’s safety. Around 19,000 files related to the nuclear plant were online since June 11 as per independent cybersecurity researcher Rakesh Krishnan.

Modus Operandi of World Leaks

Allegedly, meeting and inspection records, reviews of equipment as well as insurance policies were leaked. World Leaks usually publishes stolen corporate information on its site after organizations refuse to give the demanded ransom. Note that the ransomware entity’s site can only be accessed via a specialized browser.

India Among Top Nations Subject to Cyberattacks

This is not the first cyber-attack on the concerned plant. In 2019, malware was discovered on this nuclear plant’s administrative network. The country’s premier cybersecurity agency the Indian Computer Emergency Response Team (CERT-In) is investigating the incident. The leaked data may cause major security risks. As per Yotta, suspicious activity was detected on May 29th on one of Reliance Infrastructure’s servers. The former reacted instantly and halted the attempted ransomware attack. Significantly, the leaked information does not seem to contain the designs of the nuclear reactors delivered by Russian state owned Rosatom.

FAQs

1. Which nuclear plant was reportedly affected by the data breach?

The reported incident involved the Kudankulam Nuclear Power Plant (KKNPP) in Tamil Nadu, India’s largest nuclear power station. Reports stated that files linked to the project appeared on the dark web after a ransomware attack targeting a contractor’s systems. (Reuters)

2. Was the nuclear reactor or its safety systems compromised?

According to the Nuclear Power Corporation of India Limited (NPCIL) and the Indian government, there was no breach of the plant’s nuclear safety or security systems. Officials said the reported leak involved non-critical information and that reactor operations remained secure. (The Times of India)

3. What type of information was reportedly exposed?

Reports indicate that the leaked files allegedly included project documents such as engineering drawings, supplier information, inspection records, and insurance-related files connected with construction activities. Authorities maintain that these files did not include sensitive reactor control or operational data. (Reuters)

4. Who is believed to be behind the attack?

The ransomware group World Leaks claimed responsibility for publishing thousands of files on the dark web. Indian authorities and cybersecurity agencies are investigating the incident to verify the extent of the exposure and its impact. (Reuters)

5. Why is this incident significant?

Even if critical reactor systems were not affected, cybersecurity experts say that exposing project-related documents could help attackers understand infrastructure, contractors, or supply chains. The incident highlights the importance of strong cybersecurity measures for organizations supporting critical infrastructure. (Reuters)

SOURCES:-

https://www.indiatoday.in/business/story/kudankulam-nuclear-plant-data-breach-anil-ambani-reliance-blueprint-leak-2948376-2026-07-15

https://www.aljazeera.com/news/2026/7/16/data-breach-reportedly-targets-indias-kudankulam-nuclear-power-plant

https://www.thehindu.com/news/national/files-relating-to-kudankulam-nuclear-power-plant-exposed-in-data-breach-report/article71226179.ece

https://www.reuters.com/world/india/files-relating-indias-largest-nuclear-power-plant-kudankulam-exposed-data-breach-2026-07-15/

https://www.thehindu.com/opinion/editorial/wealth-of-lacunae-on-the-kudankulam-nuclear-plant-data-leak/article71230157.ece

https://www.japantimes.co.jp/news/2026/07/16/asia-pacific/crime-legal/india-nuclear-plant-data-breach/

https://moderndiplomacy.eu/2026/07/15/files-linked-to-indias-largest-nuclear-plant-exposed-in-data-breach/