Reliance Group Reports Data Breach as Ransomware Group Targets Power Files

NEW DELHI — India’s primary cybersecurity agency is investigating a reported data breach after a ransomware collective known as "World Leaks" published a cache of files on the dark web. The leaked data, which the group claims originated from the Reliance Group, includes purported blueprints and supplier details related to facilities at the Kudankulam Nuclear Power Plant.

Reliance Group acknowledged the incident, characterizing it as a "partial breach" of its data stored on a server. The company confirmed that it has formally reported the matter to the Indian government to initiate a comprehensive response.

Nature of the Leak and Security Concerns

The files posted by the World Leaks ransomware group contain information that has raised immediate security questions. Among the documents are technical schematics and supplier information purportedly linked to the Kudankulam Nuclear Power Plant, one of India’s most significant nuclear energy facilities.

While the connection between Reliance Group's internal server data and the Kudankulam facility remains under active investigation, the publication of infrastructure-related blueprints has prompted immediate concern regarding the protection of sensitive national assets. Cyber-security experts note that even if such information is outdated or related to non-critical systems, its exposure provides valuable intelligence for potential future threat actors.

Government and Corporate Response

The Indian government has mobilized its cybersecurity infrastructure, with the primary national agency spearheading the forensic examination of the breach. The investigation is currently focused on two primary tracks:

• Source Verification: Confirming whether the files published by World Leaks were indeed exfiltrated from a Reliance Group server and assessing the extent of the compromised data.

• Infrastructure Impact: Evaluating the sensitivity of the leaked Kudankulam-related documents to determine if they pose any genuine threat to the nuclear plant’s operational security or physical safety.

Reliance Group stated that it is cooperating fully with the authorities. "There has been a partial breach of our data on a server, and the matter has been reported to the Indian government," a company spokesperson indicated.

Contextual Background

This incident arrives at a time of heightened scrutiny over India’s critical infrastructure security. Previous incidents at the Kudankulam plant—such as a 2019 malware infection—led to extensive reviews of the facility's administrative and operational network isolation. Officials have consistently maintained that the plant’s critical control systems are "air-gapped" and isolated from the public internet, a stance they reiterate to reassure the public during any new cybersecurity investigation.

Why It Matters

For citizens, the incident underscores the growing threat posed by ransomware groups targeting large conglomerates that serve as critical parts of the national supply chain. For businesses, the breach serves as a stark reminder of the risks inherent in third-party and supply-chain data management. Investors and stakeholders remain focused on the potential impact on project timelines and the broader security posture of the nation's energy sector.

Key Facts at a Glance

• Data Breach: Reliance Group confirmed a "partial breach" on one of its servers.

• Threat Actor: A ransomware group identified as "World Leaks" claimed responsibility for the dark web publication.

• Sensitive Data: Leaked files purportedly include blueprints and supplier details for India's Kudankulam Nuclear Power Plant.

• Agency Response: India’s primary cybersecurity agency is conducting a formal investigation into the incident.

FAQ

Is the Kudankulam Nuclear Power Plant currently at risk? Official sources have historically maintained that the plant's critical control systems are isolated from the internet. Authorities are currently assessing whether the leaked documents contain sensitive or actionable information.

What is the "World Leaks" group? World Leaks is a ransomware collective involved in the unauthorized exfiltration and publication of corporate and sensitive data on the dark web.

What action is Reliance Group taking? The company has reported the breach to the Indian government and is cooperating with the ongoing official investigation to determine the scale of the data compromise.

Source: Official statements from Reliance Group; reports from Indian government cybersecurity agencies.