The operator of India’s largest nuclear power plant moved to contain fallout from a data breach after ransomware group World Leaks posted a large cache of files related to the Kudankulam Nuclear Power Plant on the dark web. The leaked documents reportedly included purported blueprints of plant components and supplier details.
Nuclear Power Corporation of India (NPCIL) insisted that the exposed data pertains to “common service facilities” and not the nuclear plant itself, and that no nuclear safety or security-related information was compromised. The breach nonetheless raises uncomfortable questions about cybersecurity at critical infrastructure sites — especially nuclear facilities — at a time when ransomware attacks on state assets are becoming increasingly brazen worldwide.
