Tata Electronics Investigates Data Breach Linked to World Leaks Hacking Group
Tata Electronics has launched an inquiry into a significant security breach that follows allegations from the World Leaks hacking collective, which claims to have pilfered sensitive company data and listed it for sale on an underground cyber forum.
Accounting for approximately one-third of iPhone production in India, Tata Electronics collaborates with Foxconn, which fulfills the remaining production requirements.
The company specializes in providing vital components, including circuit boards, back panels, and enclosures.
Nearly two weeks post-incident, Tata Electronics confirmed the data breach after it was revealed that the stolen information had been made available for purchase on the dark web.
“A few weeks ago, Tata Electronics identified a cybersecurity incident affecting some of our systems,” the company informed Reuters.
Data Compromised from Prominent Companies Including Apple and Tesla
The compromised cache reportedly encompasses a staggering 630.4 GB of data, comprising approximately 204,341 files that include component designs and specifications from tech titans like Apple and Tesla, replete with marked confidential data.
Among the haul were also emails, employee passports, and event logs, potentially jeopardizing the IT infrastructure by exposing additional vulnerabilities.
Since June 10, this stolen trove has been accessible for free download, raising concerns among cybersecurity experts that its exposure could facilitate further attacks as cybercriminals leverage discovered vulnerabilities, while competitors and counterfeiters engage in reverse engineering.
The leaked documentation boasts numerous references to both Apple and Tesla. Allegedly, the security breach has also impacted companies such as Pegatron, Foxconn, and Qualcomm, although these claims remain unverified.
“What is notable here is not solely the sheer volume of data, but the strategic information concentrated within a single supplier,” noted Michael Centrella, Head of Public Policy at SecurityScorecard.
“Tata Electronics operates within the supply chains of companies like Apple and Tesla, so a breach here could unveil far more than standard corporate records.”
In response to the breach, Tata Electronics activated its cyber incident protocols, aiming to contain the threat and avert any operational disruption.
Apple has also confirmed that it is conducting its own investigation into the breach, although specifics have not been disclosed.
Furthermore, Tata Electronics has reportedly received ransom demands, the details of which have yet to be made public. The specific exploit utilized in this attack remains undisclosed as well.
Emerging in 2025, World Leaks is a double-extortion cybercrime syndicate targeting a myriad of sectors, including manufacturing, technology, defense, retail, industrial, and enterprise.
The group’s modus operandi typically involves social engineering, phishing, exploiting weak or stolen passwords, targeting unpatched vulnerabilities, supply chain assault tactics, and inadequately secured remote access systems like VPNs and RDPs.
World Leaks has previously been linked to a cyberattack on Nike in 2026, which reportedly resulted in the compromise of more than 1.4 TB of data containing 190,000 corporate files.
In 2025, the group also took responsibility for an attack on defense contractor L3Harris, releasing samples of stolen data on its dark web leak site.
“Whenever a breach becomes public due to the appearance of stolen data on the dark web, it begs a larger question: how many similar operations, particularly those executed by nation-state adversaries, remain undetected?” posed John Strand, Owner of Black Hills Information Security.
“While high-profile attacks garner attention, the more pressing concern lies in the reuse and evolution of tactics, tools, and infrastructure across campaigns that evade visibility.”
Cybercriminals Increasingly Target Technology Sector
Tata Electronics is not a stranger to security challenges. In September 2025, its subsidiary, British automotive manufacturer Jaguar Land Rover, endured a ransomware attack that disrupted its operations for a duration of six weeks.
In May 2026, Foxconn confirmed an assault that compromised 8 terabytes of data from several high-profile technology firms, including Intel, Apple, and Google, which caused an operational suspension and forced employees to remain home.
Additionally, in December 2025, major tech corporations like Apple, Nvidia, and Tesla reportedly suffered a data breach following a compromise of third-party supplier Luxshare by the Russian ransomware group RansomHouse.
This incident resulted in the leak of proprietary information, including CAD models and engineering documentation.
Source link: Cpomagazine.com.
