'Data Leak' Claims About Kudankulam Nuclear Plant Surface on Dark Web; NPCIL Responds

A cache of files allegedly linked to the Kudankulam Nuclear Power Plant has reportedly surfaced on the dark web after ransomware group World Leaks claimed responsibility for a cyber intrusion, raising concerns over the security of data associated with India's largest nuclear power project.

However, the Nuclear Power Corporation of India Ltd (NPCIL) and Reliance Group have firmly denied any compromise of nuclear safety or security systems, insisting that the leaked material pertains only to conventional infrastructure and support facilities.

NPCIL Says Nuclear Safety Systems Were Never Exposed

NPCIL, which is overseeing the construction and operation of reactors at the Tamil Nadu-based plant in partnership with Russia's Rosatom, reportedly said none of the files in circulation relates to nuclear operations, safety mechanisms or security infrastructure.

"The information claimed to be available in the public domain pertains only to conventional balance-of-plant common service facilities and does not relate to any nuclear safety or nuclear security-related systems or information," the corporation said in a statement.

NPCIL Executive Director (CP&CC) Prateek Agrawal said the documents were connected to common service facilities that are similar to those found in thermal power stations and other industrial projects.

Reliance Infra Linked Through Conventional Infrastructure Contracts

Reliance Infrastructure, part of Anil Ambani's Reliance Group, had been involved in designing and building infrastructure for Units 3 and 4 of the Kudankulam project in 2018.

As per reports, the company clarified that it had been informed by its third-party data centre service provider, Yotta Data Services Pvt Ltd, about an attempted ransomware attack that resulted in a partial breach involving data hosted on one of Yotta's servers.

According to the company, the suspicious activity was detected and terminated immediately.

Yotta Says Attack Was Contained Quickly

Reliance Group reportedly said Yotta had confirmed that no ransomware was executed and that there had been no data loss or lateral movement within the network.

Services were subsequently restored, and enhanced monitoring systems have since been deployed.

"The suspicious process was identified and terminated immediately, and the incident was contained. No ransomware execution, data loss, or lateral movement occurred," the company reportedly said.

Reliance has directed Yotta to conduct a detailed investigation and submit a report into the incident.

Incident Reported to CERT-In

The company said the matter had been reported to the Indian Computer Emergency Response Team (CERT-In) and disclosed to stock exchanges under SEBI's Listing Obligations and Disclosure Requirements regulations.

The company added that further action would be taken in accordance with legal advice and regulatory requirements.

What Was Allegedly Leaked?

According to reports, World Leaks uploaded a large volume of files allegedly connected to the Kudankulam project onto dark web forums and claimed responsibility for breaching systems linked to the project.

Reports suggested that nearly 19,000 files among approximately 8.6 lakh documents allegedly associated with Reliance entities were categorised as sensitive by the cybercriminal group.

Neither NPCIL nor Reliance confirmed the authenticity of these claims.

India's Largest Nuclear Project

The Kudankulam Nuclear Power Plant, located in Tamil Nadu, is India's largest nuclear power generation facility with a planned capacity of 6,000 MW.

Units 1 and 2 are already operational, while Units 3, 4, 5 and 6 are at various stages of construction and commissioning under the joint venture between NPCIL and Russia's Rosatom.

NPCIL maintained that while files related to conventional engineering and procurement activities may have entered the public domain, the country's nuclear safety and security architecture remained fully insulated from the cyber incident.