Cybersecurity, transparency are non-negotiable in vital installations
Ransomware-linked leak involving contractor data raises cyber-disclosure and critical-infrastructure concerns around Kudankulam Nuclear Power Plant
- Suspicious activity was detected in late May 2026, and about 14.3 GB of files later appeared on a leaking platform in mid-June 2026.
- Nuclear Power Corporation of India Limited said the compromised files do not relate to the reactor core or nuclear safety and concern only conventional balance-of-plant and common service facilities.
- Reliance Infrastructure said no ransomware execution, data loss, or lateral movement occurred, and the affected server was isolated.
- Yotta Data Services said its controls detected suspicious activity on a customer file server on May 29, 2026, terminated the process, and prevented encryption or spread to other systems.
A ransomware-related leak tied to contractor systems associated with the Kudankulam Nuclear Power Plant has raised questions about cyber hygiene, vendor risk, and disclosure practices in India’s critical infrastructure. Even when the core nuclear plant is not compromised, leaked contractor files can still create security risks and expose weaknesses in incident response.
The issue matters because the Kudankulam Nuclear Power Plant is a major nuclear installation with two operating 1,000 MWe reactors, and any cyber incident linked to such a facility attracts national security concern. The current case also follows an earlier 2019 malware discovery on the plant’s administrative network.
Background and earlier position
UPSC may frame Kudankulam Nuclear Power Plant cyber incidents around cyber resilience of critical infrastructure, the distinction between operational technology and administrative networks, vendor-risk management, and the tension between public trust and disclosure after a breach. A Mains answer can also discuss the role of the Indian Computer Emergency Response Team (CERT-In), Nuclear Power Corporation of India Limited (NPCIL), and contractual ecosystems in protecting sensitive installations.
Related dispatches
