Kudankulam Plant Data Appears On Dark Web

Reports emerged that project related files linked to the Kudankulam Nuclear Power Plant (Kudankulam plant) in Tamil Nadu were posted on the dark web after a large data dump attributed to the ransomware group World Leaks. Reliance Group, one of the contractors associated with the plant, said a limited cybersecurity incident followed an attempted ransomware attack on infrastructure operated by its third party data centre service provider Yotta Data Services and that the issue was swiftly contained and did not affect core systems or business operations.\n\nReuters reported that the leaked material included engineering drawings, supplier information, inspection records and insurance related documents spanning several years, while noting that their authenticity had not been independently verified. The disclosure prompted Reliance Group to report the matter to the Indian Computer Emergency Response Team (CERT-In), which is examining the incident and coordinating any necessary response with stakeholders and government agencies.\n\nThe Kudankulam plant is India's largest nuclear power facility and forms a key part of the country's long term nuclear energy expansion plans. Reliance Infrastructure, a Reliance Group company, secured a contract in 2018 to develop infrastructure for Units three and four, which are expected to become operational by 2027. Company statements indicated that work on those units was progressing and that operational systems had remained segregated from the affected data centre functions.\n\nSecurity analysts cautioned that even when reactor control systems are untouched, exposure of infrastructure layouts, supplier networks and inspection records could pose risks that require assessment and mitigation. Agencies and contractors were reported to be conducting reviews of access controls, backup integrity and supplier communications to determine whether operational security or continuity plans should be altered. The incident has underscored the wider vulnerability of critical infrastructure to cyber threats and the need for coordinated defences.

Related Stories