Tata Electronics has confirmed that it detected a cybersecurity incident affecting some of its systems after researchers reported that a ransomware group published documents allegedly containing Apple and Tesla-related component designs and specifications.
The Indian electronics manufacturer said on Monday that it had identified the incident several weeks earlier and immediately activated response measures. Tata Electronics told Reuters that the breach had not affected its operations, which continue across its businesses without disruption.
The ransomware group World Leaks claimed responsibility for publishing stolen Tata Electronics data on the dark web. According to cybersecurity researchers who spoke to Reuters, the group released more than 200,000 files. Reuters said it could not independently verify the authenticity of the data or confirm the claims made by World Leaks.
Apple is investigating the reported breach, according to a source familiar with the matter, who said a full analysis was underway. The source also said Tata Electronics had received a ransom demand connected to the incident. Apple did not respond to requests for comment, while Tata Electronics declined to comment on the reported ransom demand.
The incident represents another challenge for Apple’s expanding supply chain in India, where Tata Electronics has become one of the company’s key manufacturing partners outside China. The expansion of Apple’s production network in India is part of Prime Minister Narendra Modi’s broader push to develop the country into a major electronics manufacturing hub.
World Leaks said on its dark web platform that it was releasing stolen data from Tata Electronics. The group’s website claimed the data contained more than 200,000 files totaling over 630 gigabytes. A database listed several files and folders with references to Apple, including items titled “com.apple.factorydata” and documents related to material specifications.
Indian cybersecurity researcher Rajshekhar Rajaharia reviewed the files for Reuters and said the data appeared to include emails, event logs covering several years and passport copies of employees, including foreign nationals. A second researcher, Rakesh Krishnan, told Reuters that the data had been accessible on the dark web since at least June 10.
The reported breach also involved documents allegedly connected to Tesla. Industry sources said Tata Electronics manufactures parts for the electric vehicle company. A folder in the World Leaks database was labeled “NV36 Chargeport Controller – North America,” which researchers said appeared to reference components used in an upgraded version of Tesla’s Model Y vehicle.
Another purported Tesla document from 2023 was marked “TRADE SECRET” and included drawings related to Project Highland, the internal name used for the redesigned Model 3 sedan. Tesla did not respond to requests for comment.
Rajaharia said searches within the leaked data returned numerous files linked to both companies. A search for “Apple” reportedly produced 181 files and folders, while a search for “Tesla” showed documents that appeared to include manufacturing specifications and assembly information dated May 2025.
Some of the published files contained confidentiality markings, including statements indicating that certain documents contained proprietary information belonging to Apple Inc. and confidential trade secrets belonging to Tesla Inc.
The reported data breach highlights concerns over cybersecurity risks affecting global technology supply chains. Among the files reviewed was a 52-page document bearing Apple-related markings that allegedly detailed quality inspection standards for iPhone circuit board components. Researchers also identified multiple files referencing Hosur, Tamil Nadu, the location of Tata’s main iPhone assembly facility.
A second industry source told Reuters that Tata had informed some employees involved in iPhone manufacturing operations about the breach last week.
Tata Electronics currently accounts for roughly one-third of Apple’s iPhone production in India, with Foxconn responsible for the remaining production, according to the report. The company has previously faced cybersecurity challenges within its broader corporate network, including a cyberattack affecting its British Jaguar Land Rover business that resulted in a six-week production halt.
