On July 14, 2026, the ransomware group World Leaks posted on the dark web a cache of files allegedly linked to India's Kudankulam Nuclear Power Plant. The data, which the group claims includes blueprints of parts of the facility and supplier details, was labeled as originating from Anil Ambani's Reliance Group, according to a Reuters report published on July 15, 2026.
The Kudankulam plant, India's largest nuclear power station, is operated by the Nuclear Power Corporation of India (NPCIL). The leaked files purportedly contain technical documents and supplier information, though the authenticity of the data has not been independently verified by Reuters or other news outlets as of July 15, 2026.
World Leaks, a relatively new ransomware group, has claimed responsibility for the breach. The group's posting on the dark web includes a sample of the files, which appear to show diagrams and lists of equipment vendors. However, NPCIL has not yet issued a statement confirming or denying the breach.
Security experts note that if the leak is genuine, it could pose significant risks to the plant's operations and national security. The Indian government and nuclear regulators are likely to investigate the claims. This incident highlights ongoing concerns about cybersecurity at critical infrastructure facilities worldwide.
