Threat Intelligence Brief
Curated summary with source attribution
Source: indiatoday.in
Threat Risk: High
Victim: Kudankulam Nuclear Power Plant
Incident: Data breach involving the leak of sensitive nuclear facility blueprints.
Impact: Serious risk to the physical and operational security of India’s largest nuclear power plant.
Attacker: World Leaks
Analysis: The threat actor World Leaks compromised a server hosted by third-party provider Yotta belonging to the Reliance Group, a primary contractor for the plant. Approximately 19,000 sensitive files, including blueprints and supplier details, were leaked on the dark web. This incident demonstrates a significant supply-chain vulnerability where contractor insecurity exposes critical state assets.
Recommendations: Audit security postures of third-party contractors with access to sensitive site data.; Implement strict encryption and access controls for critical infrastructure blueprints.; Conduct regular security assessments of third-party data center providers.
Source: India Today / Reuters
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source