A massive cyberattack on Tata Electronics, Apple’s manufacturing partner in India, has exposed sensitive product information and prompted renewed scrutiny of the country’s ambitions to become a global manufacturing powerhouse. While analysts say the breach is unlikely to derail Apple’s long-term diversification strategy, it has highlighted the challenges India must overcome as companies seek alternatives to China.
When Apple chief executive Tim Cook declared India to be “a hugely exciting market” in early 2023, he outlined a strategy that closely mirrored the company’s successful expansion in China. Speaking to investors after Apple recorded its strongest-ever quarterly sales in India, Cook explained that the company intended to apply the lessons learned from scaling its business in China to one of the world’s fastest-growing markets. As reported by the South China Morning Post, that vision has now encountered one of its most significant setbacks.
Apple’s strategy in India has always extended beyond retail expansion. Amid rising trade tensions between the United States and China, alongside existing and anticipated tariffs on Chinese-made goods, the technology giant increasingly viewed India as a critical manufacturing base capable of reducing its dependence on Chinese production. The shift formed part of Apple’s broader effort to diversify one of the world’s most complex supply chains while maintaining production capacity for its global business.
The strategy produced rapid results. According to Counterpoint Research, India accounted for around 6 per cent of global iPhone production in 2022. By 2026, that figure was expected to exceed 25 per cent, illustrating the remarkable pace at which Apple and its suppliers had expanded manufacturing operations across the country.
That progress, however, was challenged in June when hacking group World Leaks launched a cyberattack against Tata Electronics, Apple’s Bengaluru-based partner responsible for iPhone parts and assembly. More than 200,000 files were reportedly leaked onto the dark web in what analysts described as the largest information leak in Apple’s history.
The leaked files reportedly included Apple’s component lists, supplier information and photographs of the unreleased iPhone 18 Pro, exposing sensitive details relating to chips on the device’s main circuit board as well as hundreds of other components, according to Reuters. Apple, Tata and Indian authorities were reported to be investigating the incident, although neither company immediately responded to requests for comment.
For Christopher Tang, a professor specialising in global supply chain management at the University of California, Los Angeles (UCLA), the incident represents more than a single cybersecurity failure. He argued that while India has demonstrated its ability to expand manufacturing capacity, the next challenge is earning the confidence required to handle increasingly sensitive technological information.
“India has proven it can scale production; now it must prove it can scale trust,” Tang said.
He noted that India had successfully expanded labour-intensive assembly operations, attracted major suppliers including Foxconn and Tata, and benefited from government incentives designed to encourage manufacturing investment. Nevertheless, the cyberattack exposed shortcomings in three critical areas: information governance, supplier discipline and cyber-operational integration.
Tang stressed that India possesses the potential to become a major global manufacturing hub but argued that replacing China as the world’s leading manufacturing centre represents a considerably more demanding objective.
“This leak is significant because Apple’s secret sauce that creates its competitive advantage depends not only on Apple’s own systems but also on every node in its manufacturing network,” Tang said.
He added that the breach could slow Apple’s willingness to transfer its most sensitive product data or the most technically demanding product development programmes to newer manufacturing centres before stronger safeguards are demonstrated.
The cyberattack is not the only recent disruption to affect Apple’s growing manufacturing operations in India. In 2024, Tata experienced a fire at facilities in Tamil Nadu that temporarily halted production, adding to concerns about operational resilience as manufacturing capacity expands.
Even so, analysts do not believe the latest incident fundamentally alters Apple’s long-term commitment to India.
Tarun Pathak, research director at Counterpoint Research, described the breach as a problem requiring remediation rather than a threat to Apple’s relationship with Tata Electronics.
He said the incident was unlikely to halt India’s manufacturing momentum but expected it to trigger an industry-wide reassessment of the information technology infrastructure supporting electronics manufacturers throughout the country.
The timing nevertheless presents an additional challenge for Prime Minister Narendra Modi’s “Make in India” initiative, which seeks to transform the country into a global manufacturing and innovation centre capable of competing with China’s long-established position as the world’s factory.
Apple’s investment has become a central component of that broader industrial strategy. Major suppliers, including Foxconn and Tata, have significantly expanded operations across states such as Tamil Nadu and Karnataka. Foxconn, also known as Hon Hai Precision Industry, invested a further US$1.5 billion in its Indian operations last year.
India has also attracted manufacturers beyond Apple. Samsung, alongside Chinese smartphone companies Xiaomi, Oppo and Vivo, has established substantial production facilities in the country. According to official figures, India has become the world’s second-largest mobile phone manufacturer by volume, with 99.2 per cent of handsets sold domestically now produced within the country. New Delhi has further reinforced these ambitions through a new US$6.5 billion Mobile Phone Manufacturing Scheme aimed at encouraging local production and domestic sourcing while targeting US$460 billion in mobile phone manufacturing over the next five years.
Apple’s expansion has also attracted political attention in the United States. Last May, US President Donald Trump publicly stated that he had asked Cook to stop building manufacturing plants in India and instead increase production in America.
Despite such pressures, Apple’s diversification strategy remains firmly in place. Last year, Cook revealed that most iPhones sold in the United States were manufactured in India, while nearly all iPads, Macs, Apple Watches and AirPods destined for the US market were produced in Vietnam. China continues to manufacture the overwhelming majority of Apple products sold elsewhere in the world.
This geographical restructuring forms part of Apple’s “China plus one” strategy, developed to reduce dependence on a single manufacturing base after geopolitical tensions and pandemic-related disruptions exposed vulnerabilities within global supply chains.
Sun Chenghao, a fellow at Tsinghua University’s Centre for International Security and Strategy, described the strategy primarily as protection against geopolitical risk rather than an effort to maximise commercial efficiency.
He argued that the cyberattack would not reverse Apple’s diversification plans but demonstrated that expanding beyond China requires more than replicating existing manufacturing processes.
According to Sun, discussions about China’s manufacturing advantages have often concentrated on costs, efficiency and scale while overlooking less visible strengths developed over decades, including commercial confidentiality, rapid operational response and sophisticated risk control.
“Supply chain security is, in itself, a core manufacturing capability,” he said.
Sun also observed that although Apple has previously experienced product leaks through unauthorised photographs and smuggled components from factories, including facilities in China, the scale of the Tata cyberattack was unprecedented. He suggested that such an extensive breach would be highly unlikely at long-established Chinese suppliers, although not impossible.
He argued that effective protection depends not simply on technological barriers but also on organisational discipline, tiered authorisation systems, physical isolation of sensitive information, supplier compliance auditing and a deeply embedded culture of secrecy.
Analysts further noted that efforts to diversify supply chains can inadvertently create new forms of vulnerability. As manufacturing networks expand across multiple countries, companies must distribute blueprints, testing data, supplier information, quality standards and internal workflows across a growing number of partners.
“Every added node is an added point of vulnerability,” Sun said.
An anonymous source within Apple’s supply chain echoed that assessment, describing cyberattacks as an increasingly common threat affecting suppliers worldwide in the era of rapidly advancing artificial intelligence technologies. The individual said the Tata incident had served as a warning throughout Apple’s global manufacturing network rather than representing an isolated problem.
Tang offered a similar conclusion, emphasising that cybersecurity remains a continuing challenge rather than one confined to any particular country or supplier. As companies continue to diversify production across international markets, he argued, no manufacturing ecosystem can consider itself immune from increasingly sophisticated digital threats.
