Threat Intelligence Brief
Curated summary with source attribution
Source: thehindu.com
Threat Risk: High
Victim: Reliance Infrastructure (Nuclear Power Contractor)
Incident: Ransomware attack and data exfiltration.
Impact: Leak of 14.3 GB of sensitive facility layouts and vendor information.
Attacker: World Leaks
Analysis: The threat actor ‘World Leaks’ compromised systems belonging to Reliance Infrastructure, exfiltrating roughly 14.3 GB of sensitive data hosted by Yotta Data Services. While the core nuclear operational network remains unaffected, the leak of ventilation layouts and floor plans provides valuable intelligence for potential future physical or cyber attacks. This incident highlights the persistent vulnerability of third-party vendors in critical infrastructure supply chains.
Recommendations: Implement strict network segmentation between administrative and operational environments.; Audit and harden third-party contractor access to sensitive infrastructure data.; Enhance incident disclosure protocols to ensure timely reporting of supply chain breaches.
Source: The Hindu
Editorial note: this post summarizes third-party reporting and links to the original source.
View Original Source