Kudankulam Nuclear Plant Data Breach: Nuclear Plant Hacked, Files Leaked

Kudankulam – (Special Correspondent/Web Desk) – A major security scare has hit India’s nuclear power sector after the Kudankulam nuclear plant data breach came to light this week. Reports confirm that a nuclear plant hacked incident exposed thousands of sensitive files linked to India’s largest atomic energy facility. The leak has raised fresh questions about how well Indian companies protect critical infrastructure from cyber criminals.

The files were posted online by a ransomware group known as World Leaks. This group has hit big names before, including Nike and India’s Tata Group. This time, the target was Reliance Group, one of the contractors working on new units at the Kudankulam plant in Tamil Nadu.

Reliance confirmed that a “partial breach” took place on a server managed by a third-party data centre firm called Yotta. The company said it has informed the government about the matter, though it has not shared full details on what exactly was stolen.

What was leaked

Out of nearly 858,000 files linked to Reliance, around 19,000 are considered highly sensitive. These include drawings connected to cooling and ventilation systems, supplier lists, meeting notes, equipment checks, and even insurance paperwork.

One document reportedly shows an insurance deal worth $112 million in case of a terror attack on the plant’s newer units. Experts say this kind of leak could help bad actors understand how the plant works, even if it does not expose the core reactor systems, which are built by Russia’s Rosatom.

Why this matters

Nuclear security experts warn that even indirect data like this can be risky. It can reveal who has access to different parts of the plant and how those systems connect to each other. That kind of information could be misused by hackers or hostile groups planning future attacks.

This is not the first cyber trouble at Kudankulam. Back in 2019, malware linked to a North Korean hacking group was found on the plant’s office network. At that time, officials said the core plant systems were not affected.

India has been facing a rising wave of cyberattacks in recent years. According to cybersecurity firm Surfshark, India ranks third globally for data breaches, right after the United States and France. A separate industry report found that most Indian firms are not even sure if they have been targeted before, showing how big the awareness gap really is.

Government response

India’s main cyber agency, CERT-In, is looking into the breach, according to a source close to the matter. Officials from the Nuclear Power Corporation of India have not yet issued a public statement. The Prime Minister’s office and other government departments have also stayed silent so far.

As investigations continue, this incident is a strong reminder that even critical energy projects are not fully safe from modern cyber threats. With Kudankulam central to India’s nuclear expansion plans, the pressure is now on to tighten digital security across the sector.