Loading story…
Tata Electronics confirmed a cybersecurity incident affecting some of its systems after threat actors advertised more than 630GB of allegedly stolen data, spanning roughly 204,300 files, on a hacker forum and dark-web leak site. Researchers linked the posting to the World Leaks ransomware group, and reviewed samples reportedly included Outlook email conversations, event logs, SAP-related information, employee passport copies, and internal documents tied to Tata’s operations. Tata said it detected the incident weeks earlier, activated response protocols, and reported that business operations were not affected.
Samples of the leaked material appeared to include confidential supplier specifications and manufacturing documents connected to Apple and Tesla, raising supply-chain security concerns because Tata is a major manufacturing partner for both companies and also works with other semiconductor and technology firms. Reuters reported that some employees at Tata’s iPhone assembly operations were informed of the breach, Apple opened an investigation, and Tata allegedly received a ransom demand, though the company did not publicly comment on that point.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
7 events from the most recent confirmed update back to the earliest known activity.
A July 1 report said the leaked Tata Electronics data included logic board schematics for the unreleased iPhone 18 Pro and iPhone 18 Pro Max, plus data sheets for Apple-designed chips including the A20 Pro. AppleInsider reportedly reviewed the files and assessed them as likely legitimate.
Following the cyberattack, Tata Electronics restricted access to sensitive systems and engaged a global consultant to conduct a forensic audit. Apple was also reported to be working with Tata on longer-term security improvements.
Reuters reported that Apple was investigating the Tata Electronics breach after leaked files appeared to reference confidential Apple component designs and supplier specifications. The incident raised supply-chain security concerns because of Tata's role in Apple's India manufacturing operations.
Reuters reported that some employees at Tata's iPhone assembly operations were informed of the breach and that Tata had received a ransom demand. Tata declined to comment on the ransom aspect.
Tata Electronics disclosed that it had recently detected a cybersecurity incident affecting some of its systems. The confirmation followed reports that World Leaks had posted or advertised allegedly stolen Tata data online.
Tata Electronics said it detected a cybersecurity incident affecting some of its systems a few weeks before its public confirmation and activated response protocols. The company said business operations were not affected.
Researchers said purported stolen Tata Electronics data had been accessible on the dark web since at least June 10. The dataset was described as containing more than 200,000 files totaling over 630 GB.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
20 references tracked. Mallory keeps watching after this page renders.
teiss.co.uk
Open sourcemacrumors.com
Open sourceboingboing.net
Open sourcezdnet.fr
Open sourcemacrumors.com
Open sourceteiss.co.uk
Open sourcebusinessinsurance.com
Open sourcetechcrunch.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
India is investigating a suspected cyberattack on Tata Electronics after a threat actor claimed to have breached the company’s internal network and leaked more than **630 GB** of data spanning over **204,300 files**. The exposed material reportedly includes confidential Apple supplier specifications, component and supplier lists, internal code names, testing photos, and images tied to unreleased **iPhone 18 Pro** and **iPhone 18 Pro Max** models, along with documents linked to Tesla, TSMC, and Qualcomm. Reports said the stolen files had been circulating on the dark web since at least June 10, and the extortion and ransomware group **World Leaks** was identified as the actor behind the publication. Tata Electronics said it detected a data incident on some systems weeks earlier, activated incident-response protocols immediately, and maintained that business operations were not affected. The company reportedly restricted internal access to sensitive systems and brought in a global consultant for a forensic audit, while Indian officials said the case had been reported to **CERT-In** and the Ministry of Electronics and Information Technology opened a probe. Apple said it was concerned, was investigating the exposure, and was working with Tata on longer-term security measures.
Jul 7, 2026
Apple manufacturing partner **Luxshare Precision Industry** was reportedly hit by a ransomware incident involving data theft and extortion, with internal documents allegedly published to pressure payment. Reporting indicates the exposed materials include sensitive operational information tied to Luxshare’s role in Apple’s supply chain (e.g., production workflows, security procedures, and supply-chain protocols), raising concerns about downstream risk to Apple-related manufacturing and repair operations. *Help Net Security* reports the **RansomHub** ransomware-as-a-service operation claimed responsibility, alleging affiliates stole and encrypted data and posted proof on its leak site. The group claimed the stolen archives include **3D CAD models**, engineering design/documentation, **2D manufacturing drawings**, and **PCB design/manufacturing data**, and asserted the data set contains information related to multiple Luxshare customers (including Apple and other major technology/automotive firms); third-party researchers cited in the report said the leak appears to include confidential Apple-Luxshare repair and shipping project details, while Luxshare had not publicly confirmed the breach at the time of reporting.
Jun 29, 2026
Foxconn said operational IT issues disrupted its Mount Pleasant, Wisconsin campus, where workers reported a broad network outage affecting Wi‑Fi, core infrastructure, and timekeeping systems as production was gradually restored. The **Nitrogen** ransomware group later claimed responsibility on its extortion site, alleging it stole **8TB** of data spanning more than **11 million files** from the Racine County facility, including assembly instructions, hardware schematics, and data center topology diagrams tied to customers such as **Apple, Intel, Google, NVIDIA, and Dell**. Foxconn has not verified the authenticity of the leaked samples or disclosed any ransom demand, and reports said the incident may also have affected a Foxconn site in Houston. The claimed breach adds to a pattern of ransomware incidents affecting Foxconn manufacturing operations. In 2022, Foxconn confirmed a ransomware attack at its **Tijuana, Mexico** plant that disrupted production and was claimed by **LockBit**, with the company saying recovery was underway and overall business impact would be limited. That attack followed a 2020 intrusion at Foxconn’s **Ciudad Juárez** facility attributed to **DoppelPaymer**, underscoring repeated targeting of the company’s production sites and raising renewed supply-chain and industrial espionage concerns around its AI server and electronics manufacturing operations.
Jun 29, 2026