​Wealth of lacunae, Pg12

Key Highlights:

• A ransomware attack by the group 'World Leaks' targeted Reliance Infrastructure, a contractor for the Kudankulam Nuclear Power Project.
• Approximately 14.3 GB of files, including ventilation system layouts and vendor lists, were compromised from data hosted by Yotta Data Services.
• The Nuclear Power Corporation of India Limited (NPCIL) stated that the plant's core nuclear infrastructure was unaffected, with files pertaining to infrastructure beyond the nuclear island.
• The incident, publicly clarified by NPCIL on July 15 following media reports, highlights India's inconsistent breach disclosure practices.
• CERT-In is conducting an investigation into the breach, which follows a previous malware incident at the same facility in 2019.

Detailed Insights:

• The compromised data, even if not directly from the nuclear island, could be used for "intelligence preparation activities" against the sensitive facility.
• This marks the second cyber incident linked to the Kudankulam Nuclear Power Plant, raising concerns about persistent vulnerabilities in its extended ecosystem.
• India is identified as the third-most breached country, having faced similar cyberattacks on critical infrastructure like AIIMS Delhi and various government portals.
• Organizations in India often delay or avoid disclosing breaches due to fears of damaging public confidence, share prices, and inviting regulatory scrutiny.
• Many entities treat cybersecurity as a compliance issue rather than a fundamental necessity, leading to a lack of mature incident response capabilities.
• The Kudankulam Nuclear Power Plant is India's largest nuclear power station and a cornerstone of the nation's nuclear power ambitions.
• The article emphasizes the need for CERT-In and NPCIL to provide clarity on the authenticity of the leaked files, data exfiltration, and exposure of credentials.
• India's cybersecurity directives, such as the CERT-In Directions 2022, mandate reporting cyber incidents within six hours, though implementation faces challenges.

Key Concepts Involved:

• Ransomware Attack: A type of cyberattack where malicious software encrypts data, demanding payment for its release.
• Nuclear Power Corporation of India Limited (NPCIL): A Public Sector Undertaking responsible for the design, construction, operation, and maintenance of nuclear power plants in India.
• Indian Computer Emergency Response Team (CERT-In): The national agency for responding to computer security incidents, issuing alerts, and handling cyber threats under the Ministry of Electronics & Information Technology (MeitY).
• Kudankulam Nuclear Power Plant: India's largest nuclear power station, located in Tamil Nadu, crucial for the nation's energy security.