Tata Electronics breach: World Leaks dumps 630GB of alleged Apple and Tesla files

On 22 June 2026, Tata Electronics — the manufacturing arm of India's Tata Group and a major supplier to global technology brands — confirmed it had suffered a cybersecurity incident after the data-extortion group World Leaks published a large trove of files allegedly stolen from the company. The leak is significant because Tata Electronics assembles and produces components for some of the world's largest electronics manufacturers, raising fresh supply-chain concerns for its clients.

What happened

According to World Leaks' dark-web leak site, the group published more than 200,000 files totalling over 630 gigabytes, with researchers reporting the dataset had been accessible since around 10 June 2026. World Leaks is widely assessed to be a rebrand of the Hunters International ransomware operation, which wound down in 2025; unlike its predecessor, the group operates purely as a data-extortion outfit — stealing files and threatening to publish them rather than deploying encryption.

In a statement, Tata Electronics said: "A few weeks ago, Tata Electronics identified a cybersecurity incident on some of our systems. Our response protocols were deployed immediately, and the incident has had no impact on our operations across businesses, which remain unaffected."

Impact

Reporting on the leaked archive described internal employee emails, multi-year activity logs, copies of employee passports (including those of foreign nationals), and a wide range of manufacturing and component design documents. Several outlets and researchers said the files contained references to Apple and Tesla, as well as other suppliers such as Pegatron, Foxconn and Qualcomm. The authenticity and sensitivity of individual documents had not been independently verified at the time of disclosure, and Apple was reported to be investigating.

Why it matters

The incident underscores how a breach at a single contract manufacturer can ripple across the technology supply chain, exposing the design and production secrets of multiple downstream brands. Even where a victim's own operations are unaffected, the publication of engineering documents and personal data of staff can carry long-term competitive and privacy consequences that no incident-response playbook can fully undo.