Ransomware Group Leaks Thousands of Files Linked to India’s Kudankulam Nuclear Power Plant A ransomware group, World Leaks, has published over 19,000 sensitive files allegedly stolen from Reliance Group, a contractor involved in India’s Kudankulam Nuclear Power Plant the country’s largest nuclear facility. The leaked documents, posted on the dark web, include engineering blueprints, supplier details, inspection records, and insurance policies related to Units 3 and 4 of the plant, which are under construction and expected to be operational by 2027. Reliance Group confirmed a partial data breach on a server hosted by Indian data center provider Yotta, which detected suspicious activity on May 29. While Yotta claimed the ransomware execution was halted, the group later asserted it had exfiltrated data. The files do not appear to include reactor designs, which are supplied by Russia’s Rosatom, but experts warn that the leaked information could still aid adversaries in identifying vulnerabilities in support systems, supply chains, or third-party contractors. India’s Computer Emergency Response Team (CERT-In) and the Nuclear Power Corporation of India are investigating the incident, though neither the Department of Atomic Energy nor the Prime Minister’s Office has publicly commented. World Leaks, known for targeting high-profile companies and publishing stolen data after ransom demands go unmet, has not responded to inquiries. The breach underscores growing cybersecurity risks to India’s critical infrastructure, following a 2019 incident where North Korean-linked malware was detected on Kudankulam’s administrative network. With India ranking among the most affected countries by data breaches, the incident highlights the need for stronger protections across supply chains, particularly as the country expands its nuclear energy program to meet rising demand. The case also reflects a global trend of ransomware groups exploiting contractor vulnerabilities to access sensitive infrastructure data.