Loading story…
India is investigating a suspected cyberattack on Tata Electronics after a threat actor claimed to have breached the company’s internal network and leaked more than 630 GB of data spanning over 204,300 files. The exposed material reportedly includes confidential Apple supplier specifications, component and supplier lists, internal code names, testing photos, and images tied to unreleased iPhone 18 Pro and iPhone 18 Pro Max models, along with documents linked to Tesla, TSMC, and Qualcomm. Reports said the stolen files had been circulating on the dark web since at least June 10, and the extortion and ransomware group World Leaks was identified as the actor behind the publication.
Tata Electronics said it detected a data incident on some systems weeks earlier, activated incident-response protocols immediately, and maintained that business operations were not affected. The company reportedly restricted internal access to sensitive systems and brought in a global consultant for a forensic audit, while Indian officials said the case had been reported to CERT-In and the Ministry of Electronics and Information Technology opened a probe. Apple said it was concerned, was investigating the exposure, and was working with Tata on longer-term security measures.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
6 events from the most recent confirmed update back to the earliest known activity.
India’s Ministry of Electronics and Information Technology began investigating a suspected cyberattack against Tata Electronics after a threat actor claimed to have breached the company’s internal network and leaked sensitive data online. The allegedly stolen data was reported to exceed 630 GB across more than 204,300 files, including Apple supplier specifications, Tesla manufacturing documents, and images tied to unreleased iPhone 18 Pro models.
Indian officials said the Tata Electronics matter was reported to CERT-In following the suspected cyberattack and data leak. Tata also stated that business operations were not affected.
Tata Electronics said it detected a data incident on some of its systems a few weeks before the July 7 report and immediately activated incident response protocols. The company also restricted internal access to sensitive systems and hired a global consultant for a forensic audit.
Apple said it was concerned about the incident, was investigating, and was working with Tata Electronics on long-term security measures. The leaked material reportedly included information tied to unreleased iPhone 18 Pro and iPhone 18 Pro Max models.
Reporting identified the extortion/ransomware group World Leaks as the threat actor behind the Tata Electronics cyberattack. The breach was described as leading to the theft and dark web publication of confidential Apple documents.
A dataset allegedly stolen from Tata Electronics had been circulating since at least 2026-06-10. The material reportedly included more than 200,000 files containing confidential Apple-related documents and other sensitive data.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Tata Electronics confirmed a cybersecurity incident affecting some of its systems after threat actors advertised more than **630GB** of allegedly stolen data, spanning roughly **204,300 files**, on a hacker forum and dark-web leak site. Researchers linked the posting to the **World Leaks** ransomware group, and reviewed samples reportedly included Outlook email conversations, event logs, SAP-related information, employee passport copies, and internal documents tied to Tata’s operations. Tata said it detected the incident weeks earlier, activated response protocols, and reported that business operations were not affected. Samples of the leaked material appeared to include confidential supplier specifications and manufacturing documents connected to **Apple** and **Tesla**, raising supply-chain security concerns because Tata is a major manufacturing partner for both companies and also works with other semiconductor and technology firms. Reuters reported that some employees at Tata’s iPhone assembly operations were informed of the breach, **Apple** opened an investigation, and Tata allegedly received a ransom demand, though the company did not publicly comment on that point.
Jul 2, 2026
Apple manufacturing partner **Luxshare Precision Industry** was reportedly hit by a ransomware incident involving data theft and extortion, with internal documents allegedly published to pressure payment. Reporting indicates the exposed materials include sensitive operational information tied to Luxshare’s role in Apple’s supply chain (e.g., production workflows, security procedures, and supply-chain protocols), raising concerns about downstream risk to Apple-related manufacturing and repair operations. *Help Net Security* reports the **RansomHub** ransomware-as-a-service operation claimed responsibility, alleging affiliates stole and encrypted data and posted proof on its leak site. The group claimed the stolen archives include **3D CAD models**, engineering design/documentation, **2D manufacturing drawings**, and **PCB design/manufacturing data**, and asserted the data set contains information related to multiple Luxshare customers (including Apple and other major technology/automotive firms); third-party researchers cited in the report said the leak appears to include confidential Apple-Luxshare repair and shipping project details, while Luxshare had not publicly confirmed the breach at the time of reporting.
Jun 29, 2026
Chinese cybersecurity firm KnownSec suffered a significant data breach, resulting in the leak of over 12,000 internal documents. The files, briefly posted on GitHub before removal, reportedly include details on KnownSec's contracts with Chinese government and military entities, internal hacking tools, and a spreadsheet listing 80 overseas targets. Analysis of the leaked data suggests the presence of remote access trojans (RATs) capable of compromising Linux, Windows, macOS, iOS, and Android systems, with some tools able to extract data from popular messaging apps such as Telegram and Chinese platforms. The breach also exposed large datasets, including 95GB of Indian immigration data, 3TB of call records from South Korea's LG U Plus, and 459GB of Taiwanese road planning data. Security researchers and analysts have described the leak as an intelligence gold mine, providing rare insight into the operations of a major Chinese cyber contractor. While the exact motivation behind the leak remains unclear—whether it was the act of a disgruntled insider or an external hack-and-dump operation—the incident highlights the scale and scope of KnownSec's cyber activities, including its role in mapping foreign digital infrastructure and developing tools for state-sponsored operations. The exposure of these documents is likely to have significant implications for both Chinese cyber operations and the security of the affected international targets.
Jun 29, 2026