A significant data leak has occurred at India's largest nuclear power facility, the Kudankulam plant, with nearly 19,000 documents reportedly exposed, according to Indian sources. The leaked files are said to include engineering designs, supplier information, and employee data. Some experts have raised concerns that this incident could pose a threat to the plant's security, although the operator has denied any such risk exists.

The Kudankulam Nuclear Power Plant is located in Tamil Nadu in southern India and began operations in 2013, with several additional reactor units under construction. The data breach is linked to one of the plant's contractors, Reliance Infrastructure Ltd. Reports indicate that a ransomware attack on the contractor led to the leak of over 850,000 files, with approximately 19,000 pertaining to the Kudankulam plant. These are believed to be among the most sensitive documents, containing design drawings from various project phases, personnel details, procurement records, and insurance policies.

Reliance Infrastructure Ltd has stated it has reported the incident to the Indian government. Sources have indicated that the Computer Emergency Response Team (CERT-In), under India's Ministry of Electronics and Information Technology, has initiated an investigation.

Some experts have pointed out that this event highlights inadequate preparedness among many Indian corporations facing increasingly frequent cyberattacks. Theoretically, the leaked documents could be used to map support systems related to the plant, identify suppliers, and pinpoint vulnerabilities in the supply chain, potentially exposing the facility to security threats.

However, the plant's operator, Nuclear Power Corporation of India Ltd (NPCIL), has disputed this assessment. The corporation asserts that the leaked files relate only to general service facilities constructed by the contractor and do not involve the plant's safety or security systems, therefore dismissing the need for concern.