Tata Electronics has reported a cybersecurity incident following claims from a ransomware-linked threat group that it has exfiltrated and published over 200,000 files related to Apple and Tesla’s manufacturing operations.
The leaked data, which is said to amount to more than 630 GB, has appeared on a dark web portal operated by the “World Leaks” group.
The files reportedly include sensitive engineering documents, internal communications, and employee-related records, raising concerns about potential third-party supply chain vulnerabilities, particularly as Tata Electronics is playing an increasingly significant role in Apple’s manufacturing ecosystem in India.
Tata Electronics Data Breach
According to Tata Electronics, the breach was identified several weeks ago, and incident response protocols were activated immediately. The company stated that operations have not been impacted.
However, sources indicate a ransomware demand may have been made, suggesting a ransomware or double-extortion scenario. Apple has reportedly begun an internal investigation into the breach, though no official statement has yet been released. Tesla has also refrained from commenting on the claims.
Preliminary analysis by independent security researchers of the leaked dataset indicates the presence of structured directories with references such as “com.apple.factorydata” and “material specification.”
These folders are said to contain detailed component-level documentation, including quality inspection standards and manufacturing specifications for Apple’s iPhone supply chain. One document, reportedly containing Apple’s proprietary markings, outlines circuit board inspection workflows, potentially exposing internal quality assurance processes.
The dataset appears to include Tesla-related files, including documents marked as “TRADE SECRET.” One folder labeled “NV36 Chargeport Controller – North America” suggests links to the component design of Tesla vehicles, possibly associated with updates to the Model Y systems. Another document refers to “Project Highland,” Tesla’s internal codename for the redesigned Model 3 platform.
These files could contain design schematics and assembly instructions, posing significant intellectual property risks if verified.
In addition to engineering data, researchers found email archives, multi-year system event logs, and personally identifiable information, including passport copies from employees and foreign nationals.
This exposure increases the likelihood of secondary attacks, including phishing, identity theft, and corporate espionage. The availability of long-term log data may also provide threat actors with insights into internal infrastructure and operational patterns.
According to Reuters, reports suggest the breach has been accessible on the dark web since at least June 10, indicating a potential delay between the time of compromise and detection and public disclosure.
The attack has been attributed to the “World Leaks” group, which has been linked to other high-profile breaches involving global brands. Although the attribution remains unverified, the scale and organization of the data imply a targeted intrusion rather than an opportunistic compromise.
This incident highlights the persistent risks within global electronics supply chains, where third-party manufacturers manage highly sensitive intellectual property. As Apple continues to expand its production in India, incidents involving key partners such as Tata Electronics underscore the need for effective vendor risk management, network segmentation, and continuous monitoring.
The Indian Computer Emergency Response Team has not yet issued an official advisory, and further forensic investigation is expected to determine the root cause, the attack vector, and the overall scope of the data exposure.
Follow us on Google News, LinkedIn, and X to Get Instant Updates and Set GBH as a Preferred Source in Google.
