Kudankulam nuclear plant data leak sparks ‘absolute commotion’, Pg1

Key Highlights:

• A data leak involving over 19,000 sensitive files from the Kudankulam Nuclear Power Plant (KKNPP) has been reported.
• The files, dating from 2016 to mid-2025, were reportedly accessed by the ransomware group World Leaks from a contractor's server.
• The leak originated from a server hosted by third-party provider Yotta, used by Reliance Group, a contractor for KKNPP.
• Nuclear Power Corporation of India Limited (NPCIL) stated the leaked data relates to "conventional balance of plant common service facilities" and not nuclear safety systems.
• Investigations by NPCIL and Computer Emergency Response Team (CERT-In) are currently underway.

Detailed Insights:

• The leaked data includes engineering blueprints for control, cooling, and ventilation systems, along with vendor and supplier lists.
• This incident raises concerns about potential security threats and the mapping of support systems for vulnerabilities.
• KKNPP is India's largest nuclear power station, located in Tamil Nadu, operating with Russian-designed VVER reactors.
• Reliance Infrastructure secured the contract in 2018 for building infrastructure for KKNPP's reactors 3 and 4.
• A similar incident occurred in 2019, where a North Korean malware infected KKNPP's administrative network, which NPCIL had then dismissed.
• The plant is currently building four more 1,000 MWe VVER units in collaboration with Russia, in addition to its two operational units.

Key Concepts Involved:

• Kudankulam Nuclear Power Plant (KKNPP): India's largest nuclear power station in Tamil Nadu, operating with Russian-designed VVER reactors.
• Nuclear Power Corporation of India Limited (NPCIL): A Public Sector Undertaking responsible for the design, construction, commissioning, and operation of nuclear power reactors in India.
• Computer Emergency Response Team (CERT-In): The national agency for responding to computer security incidents in India.
• VVER Reactors: A series of pressurized water reactor (PWR) designs developed in the Soviet Union, used in many countries including India.
• Ransomware: A type of malicious software that encrypts a victim's files, demanding a ransom payment to restore access.