Hackers Leak 19,000 Sensitive Files from India’s Largest Nuclear Power Plant

A hacker group has leaked approximately 19,000 sensitive files related to the Kudankulam Nuclear Power Plant in southern India, the country's largest nuclear facility. The data breach occurred after the hackers infiltrated servers of Reliance Group, a major contractor for the plant. Reliance confirmed a "partial breach" of its data on a server managed by an external provider and reported the incident to local authorities.

The leaked documents, dated between 2016 and mid-2025, include detailed blueprints of ventilation and cooling systems under construction, a full floor plan of a shared control room, lists of approved suppliers, equipment testing records, and insurance policies covering up to $112 million in the event of a terrorist attack. Security experts warn that the leak poses a serious safety risk by potentially allowing hostile actors to map vulnerabilities in the plant’s infrastructure and supply chain.

Nicholas Roth, senior director at the Nuclear Threat Initiative, told Reuters that the breach could enable adversaries to identify weak points and access routes used by suppliers. This is not the first cyber incident involving Kudankulam; in 2019, North Korean malware was detected in its administrative network. India ranks third globally in data breaches, with a report revealing that 73% of Indian organizations are unaware of past attacks and over half lack basic cybersecurity protocols.

The leak highlights ongoing cybersecurity challenges facing critical infrastructure in India, raising concerns about national security and the safety of strategic energy assets under Prime Minister Narendra Modi’s energy program. Authorities are currently investigating the breach and assessing its implications.