(Central News Agency, New Delhi, 23rd - compiled international news) Tata Electronics India announced it recently detected a 'cybersecurity incident.' The ransomware group World Leaks has posted what are claimed to be component design and specification documents from Apple and Tesla, both of which are clients of Tata Electronics.
Cybersecurity researchers told Reuters that World Leaks posted over 200,000 files on the dark web.
Tata Electronics stated in a release provided to Reuters: 'A few weeks ago, Tata Electronics detected a cybersecurity incident in some of its systems and immediately initiated response protocols. This incident has not impacted the operations of any of our businesses, and all operations remain unaffected.'
An informed source revealed that Apple is investigating the data leak. The source also stated that Tata received a ransom demand related to this incident.
Apple has not responded to Reuters' request for comment; Tata Electronics declined to comment on the ransom demand.
Last year, Jaguar Land Rover, a subsidiary of the Tata Group, suffered a cyberattack that halted production lines for six weeks.
World Leaks stated on its dark web site that it is releasing data stolen from Tata Electronics. Reuters was unable to immediately verify the authenticity of the data or contact World Leaks for comment.
World Leaks claims the Tata Electronics data includes over 200,000 files, with a total data volume exceeding 630GB.
Indian independent cybersecurity researcher Rajshekhar Rajaharia reviewed the Tata data files on the World Leaks site for Reuters.
He stated the files include emails, event logs spanning several years, and passport copies of employees, including foreign staff. The site is accessible only via the dark web and cannot be indexed by search engines.
Another cybersecurity researcher, Rakesh Krishnan, who reviewed the leaked data, told Reuters the data has been accessible on the dark web since at least June 10.
Industry sources indicate that Tata also manufactures parts for Tesla.
The World Leaks database contains a folder labeled 'NV36 Chargeport Controller - North America,' allegedly referring to a component used in the facelifted Tesla Model Y SUV.
Another document, reportedly from Tesla in 2023 and marked 'Confidential,' displays design diagrams for 'Highland,' the internal codename for the facelifted Model 3. Tesla has not responded to requests for comment.
This incident highlights the vulnerability of global enterprises facing increasingly sophisticated cyberattacks and ransomware threats.
Among the files is a 52-page document bearing Apple's patent markings, reportedly detailing quality inspection standards for iPhone circuit board components.
Additionally, searching with the keyword 'Hosur' yields 33 files and folders. Hosur is the location of Tata's primary iPhone assembly plant in Tamil Nadu state.
A second industry insider stated that last week Tata informed some employees involved in its iPhone assembly operations about the data breach.
Tata currently accounts for approximately one-third of Apple's iPhone production in India, with the remainder handled by Foxconn. (Translation: Liu Shuqin) 1150623
FACT BOX
- Source: CNA (Central News Agency)
- Category: Taiwan
- Organizations: Apple / Tesla / Foxconn