A ransomware group has claimed responsibility for leaking thousands of files allegedly linked to India’s largest nuclear plant, raising fresh concerns about cybersecurity and the protection of critical infrastructure. The incident has prompted an investigation by Indian authorities, while officials continue to assess the scope of the reported breach.
According to a Reuters report, the ransomware group known as World Leaks uploaded the files to the dark web. The group claimed the documents were obtained from the Reliance Group, a contractor involved in the Kudankulam nuclear plant located in the southern Indian state of Tamil Nadu.
Reuters reported that the leaked material includes facility blueprints, supplier information, inspection records, meeting documents, equipment assessments, and insurance papers dated between 2016 and mid-2025. However, the news agency said it could not independently verify the authenticity of the documents.
The reported leak has raised concerns because of the potential exposure of information related to one of India’s most important energy facilities. Experts often consider cybersecurity a key priority for organizations connected to critical infrastructure, including nuclear facilities.
Reliance Group acknowledged that one of its servers experienced what it described as a “partial breach.” In a statement shared with Reuters, the company said the affected server was hosted by third-party data centre provider Yotta.
The company added that it had informed the Indian government about the incident. However, Reliance did not specify which information, if any, had been compromised during the breach.
Yotta also released a statement regarding the incident. The company said it detected suspicious activity on the affected server on May 29 and immediately blocked what it believed was a ransomware attack.
According to Yotta, Reliance Infrastructure later informed the company that external threat actors had claimed responsibility for a data breach. Yotta stated that it has not been able to independently verify those claims.
The data centre provider said it completed a technical investigation and shared its findings with Reliance. It also confirmed that it continues to assist with the ongoing inquiry.
Reuters reported that approximately 19,000 files appeared to contain the most sensitive information from a much larger collection of more than 858,000 files allegedly stolen from Reliance.
The contents reportedly include technical and administrative documents connected to the nuclear plant, although officials have not confirmed the authenticity of the leaked material.
According to Reuters, a source familiar with the matter said that India’s Nuclear Power Corporation is coordinating with Reliance to address the situation. Meanwhile, the Indian Computer Emergency Response Team (CERT-In) has launched an investigation into the alleged cyberattack.
Authorities are expected to examine whether any confidential information was accessed or exposed during the incident. The investigation will also determine the accuracy of the claims made by the ransomware group.
Cybersecurity experts note that attacks targeting critical infrastructure have become increasingly common worldwide. Organizations responsible for energy, transportation, healthcare, and public utilities continue to strengthen their digital security systems against evolving cyber threats.
In other news read more about Malaysia Minister’s Remarks on LGBTQ Draw Debate Online
The investigation into the alleged nuclear plant data leak remains ongoing. Officials have not yet confirmed the full extent of the breach or whether the leaked files contain genuine sensitive information. Further updates are expected as authorities continue their technical assessment and inquiry.
