Government Probes WhatsApp’s Username Feature Over Cybercrime Risks, Investigates Tata Electronics Data Leak The Indian government has demanded an explanation from WhatsApp regarding its username feature, citing concerns that it could enable cybercriminals to conceal identities, impersonate users, and evade detection in fraud and other offenses. Speaking at a CII Conference on Friday, Ministry of Electronics and Information Technology (MeitY) Secretary S. Krishnan stated that the government has directed WhatsApp and other platforms like Signal and Telegram to clarify the purpose of such features amid growing scrutiny of encrypted messaging tools. Krishnan also confirmed that authorities are investigating a reported data leak involving Tata Electronics, a key supplier in Apple’s global manufacturing chain that produces iPhone components in India. While details remain under examination, the incident has raised concerns about potential cybersecurity vulnerabilities and the exposure of sensitive corporate data. On Virtual Private Networks (VPNs), Krishnan noted that existing guidelines require providers operating in India to register, but enforcement is complicated by services based overseas. Rather than relying solely on legal measures, the government is exploring techno-legal solutions to address challenges posed by unregistered VPNs that bypass restrictions. The developments reflect broader efforts to balance digital innovation with cybersecurity, particularly as encrypted platforms and offshore services complicate regulatory oversight. The government continues to assess the scope and impact of both the WhatsApp feature and the Tata Electronics breach.

World Leaks Ransomware Group Claims Breach of Tata Electronics, Exposing Apple and Tesla Trade Secrets The ransomware group World Leaks has resurfaced, alleging a breach of Tata Electronics, an Indian technology and manufacturing firm that supplies hardware and software to major corporations, including Apple and Tesla. The attack, reportedly occurring in May 2026, involved the theft of 634GB of sensitive data, including confidential client information and trade secrets. Among the stolen files are nearly 200,000 documents linked to Apple’s component designs for products like iPhones, iPads, and Macs. The hackers also claim to have accessed Tesla’s factory-related documents, including technical details on the NV36 Chargeport Controller used in the Model Y SUV. Portions of the data are already being sold on dark web marketplaces, raising concerns about intellectual property theft, corporate espionage, and industrial sabotage. World Leaks previously targeted Nike earlier this year, reinforcing its pattern of high-profile breaches. The group has threatened to publicly release the stolen data unless its demands are met. Cybersecurity experts suggest the attackers may have lurked undetected in Tata Electronics’ network for months, a tactic known as "dwell time," allowing them to exfiltrate large volumes of data without immediate detection. This incident is not the first cybersecurity controversy for the Tata Group. In a prior attack, Jaguar Land Rover (JLR), another Tata subsidiary, was targeted by the Scattered Lapsus$ Hunter collective a collaboration of notorious cybercrime groups, including Scattered Spider, Lapsus$, and Shiny Hunters. While Apple and Tesla have not commented, Tata Electronics has acknowledged the breach, stating it has strengthened security measures and is working to mitigate risks. Analysts warn that such leaks can fuel phishing attacks, blackmail, and industrial espionage, with stolen intellectual property fetching high prices in underground markets. The breach underscores the growing threat to global supply chains, as ransomware groups increasingly target third-party vendors to exploit interconnected corporate networks. The incident highlights the need for enhanced vendor security in an era of expanding digital ecosystems.