Kudankulam nuclear plant files on the dark web: Inside the alleged data leak

📌 Summary:

• For over a month, a large cache of files purportedly linked to the Kudankulam Nuclear Power Plant (KKNPP) has been available on the dark web, leaked by ransomware group "World Leaks"
• The leaked KKNPP dataset (14.3 GB, 18,997 files) is part of a larger 1.2 TB, 858,000+ file cache purportedly linked to the Anil Ambani-led Reliance Group; its subsidiary Reliance Infrastructure won the 2018 EPC contract for the plant's non-nuclear "Balance of Plant" (BoP) common service facilities
• Contents include inspection records, engineering design files, meeting minutes and correspondence with the Nuclear Power Corporation of India Ltd (NPCIL); largely relating to Units 3 and 4
• Reliance Group confirmed a "partial breach" on a server hosted by third-party data centre provider Yotta and informed the government; Yotta said it detected suspicious activity on May 29 and prevented the suspected ransomware execution
• NPCIL clarified the leaked data does NOT pertain to any nuclear safety or security systems — only conventional BoP facilities
• KKNPP context: located in Tirunelveli district, Tamil Nadu; six VVER-design Pressurised Water Reactors built with Russian collaboration; Units 1 & 2 operational, Units 3 & 4 due by 2027

🎯 UPSC Relevance: GS3 Internal Security — cyber security of critical infrastructure, third-party/supply-chain vendor risk, ransomware threats; also links to S&T (nuclear energy)

📝 Prelims Facts:

• KKNPP is in Tirunelveli district, Tamil Nadu; reactors are VVER Pressurised Water Reactors built with Russian collaboration; operator is NPCIL
• "Balance of Plant" (BoP) = the plant's conventional, non-nuclear common service facilities
• The breach occurred via a third-party data centre (Yotta) hosting a Reliance Infrastructure server

🔑 Key Term: Ransomware — malicious software that encrypts or exfiltrates data, with attackers demanding payment or leaking data (as via "World Leaks") if unpaid.