Ransomware group World Leaks has posted on the dark web a huge cache of files related to India's largest nuclear plant, including purported blueprints of parts of its facilities and supplier details, information it labelled as coming from Reliance Group. Reuters said the 19,000 files appeared to be the most sensitive subset of a total 858,000 Reliance files on the World Leaks website.

Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities and supplier details. Reuters reviewed the documents, which were dated from 2016 to mid-2025, but could not verify their authenticity. Nearly 19,000 files totalling 14.3GB that appear for the search term “KKNP” — an acronym for the nuclear plant — in the data have been online since June 11, according to an independent cybersecurity researcher who first alerted Reuters to the leak.

Ransomware group World Leaks has posted on the dark web a huge cache of files related to India’s largest nuclear plant, including purported blueprints of parts of its facilities and supplier details. Nearly 19,000 files totalling 14.3GB that appear for the search term “KKNP” — an acronym for the nuclear plant — in the data have been online since June 11, according to independent cybersecurity researcher Rakesh Krishnan, who first alerted Reuters to the leak.

The incident reportedly involved the posting of sensitive documents to the dark web, including purported blueprints and supplier details. According to reports, the leaked materials include inspection records and equipment reviews. World Leaks has posted these files on the dark web, although their full authenticity remains under investigation.

A ransomware group has allegedly leaked thousands of files linked to the Kudankulam Nuclear Power Plant, raising concerns over cybersecurity at India's critical infrastructure. The hacker group World Leaks claims to have published over 19,000 files as part of a larger cache allegedly stolen from Reliance Group, a contractor involved in the project.

A massive data breach has exposed nearly 19,000 sensitive files related to the Kudankulam Nuclear Power Plant on the dark web. The files, totaling 14.3 gigabytes, were leaked by the ransomware syndicate World Leaks after extortion demands were ignored.

On Tuesday, July 15, 2026, news emerged regarding a significant data breach involving the Kudankulam Nuclear Power Plant, where several gigabytes of sensitive information were reportedly compromised and leaked following a ransomware attack. The leaked data has surfaced on World Leaks, a dark web platform operated by cybercriminals who target susceptible organizations with ransomware, threatening to disclose the information unless a ransom is paid.

A large number of files allegedly from India's largest nuclear plant, the Kudankulam Nuclear Power Plant (KNPP), have been leaked on the dark web. About 858,000 files were posted on the dark web by ransomware group World Leaks, which it claimed were from the Reliance Group, a Reuters report said. 19,000 of these files appeared to be highly sensitive, including blueprints, supplier details, meeting and inspection records, equipment reviews and insurance policies.

A ransomware assault targeting a contractor linked to the Kudankulam nuclear power initiative raises alarms, even though no critical data threatening the facility's security was compromised. Based on available information, the core infrastructure of the facility remains intact. Instead, **a group named 'World Leaks' executed a ransomware attack that affected data belonging to Reliance Infrastructure**, one of the engineering contractors for Units 3 and 4. As per the open-source intelligence platform RansomLook, **the compromised data started appearing on World Leaks on June 11**, hosted on the dark web. Approximately **14.3 GB of documents have been made public**, including designs of ventilation systems, floor plans for an alleged control room, lists of suppliers and vendors, and insurance documentation.

For more than a month, a large cache of files purportedly linked to the Kudankulam Nuclear Power Plant have been available on the dark web. The data, leaked by ransomware group World Leaks, is purportedly linked to Anil Ambani-led Reliance Group, whose subsidiary Reliance Infrastructure Ltd was awarded the EPC contract in 2018 for the plant's non-nuclear Balance of Plant facilities. The leaked data includes a 14.3 GB dataset comprising 18,997 files related to the plant.

In response to reports indicating that a ransomware group had accessed highly sensitive information from a contractor's server related to the Kudankulam Nuclear Project (KNPP), Nuclear Power Corporation of India Limited (NPCIL) issued a statement on Wednesday, July 15, 2026, dismissing the notion of a 'sensitive data breach.' They clarified that the information purportedly available publicly is limited to 'conventional balance of plant common services.' The data leak reportedly **stemmed from a server managed by third-party service provider Yotta, linked to the contractor Reliance Group**, which acknowledged a 'partial breach' but refrained from discussing the specifics of the data accessed via the dark web.

A massive data breach has exposed nearly 19,000 sensitive files related to the Kudankulam Nuclear Power Plant on the dark web. The files, totaling 14.3 gigabytes, were leaked by the ransomware syndicate World Leaks after extortion demands were ignored. The leaked files span from 2016 to mid-2025 and reportedly contain engineering blueprints, vendor proposals, supplier lists, and inspection reports.

A ransomware group has allegedly **leaked thousands of files linked to the Kudankulam Nuclear Power Plant**, raising concerns over cybersecurity at India's critical infrastructure. The hacker group **World Leaks claims to have published over 19,000 files as part of a larger cache allegedly stolen from Reliance Group**, a contractor involved in the project. The leaked documents reportedly include engineering plans, control room layouts and inspection records related to Units 3 and 4, which are under construction.

The KNPP attack was not intended to cause destruction but to **extort the confidential data and conduct reconnaissance**. Group B **extorts the confidential documents from the nuclear power plant system**, so the malware found in the nuclear power plant system is Group B’s malware. Dtrack malware is a backdoor Trojan designed specifically to **steal data from the compromised device** and was attributed to the Lazarus Group; this earlier incident at Kudankulam shows a history of cyberattacks aimed at data exfiltration, though it predates the World Leaks case.

World Leaks has previously targeted Nike and India’s Tata Group. The site can be accessed only with a specialised browser. The posting reportedly included a very large cache of files connected to Reliance Group and the Kudankulam project.

Nearly 19,000 files tied to Kudankulam Nuclear Power Plant, including blueprints, supplier records, and inspection reports, surfaced on the dark web this week.

A massive data breach has exposed nearly 19,000 sensitive files related to the Kudankulam Nuclear Power Plant on the dark web. These files are available on the dark web.