What Did the Leak Reveal?
Over 630 GB of confidential data from Apple's key supplier in India, Tata Electronics, was stolen and published by the ransomware group World Leaks. The leak includes detailed parts from the iPhone 18 Pro's main circuit board to battery and camera modules, supplier information, and photos of the model.
According to Reuters, World Leaks published over 200,000 files on its dark web leak site on June 12. Tata Electronics confirmed the cybersecurity incident publicly.
How Did the Attack Happen?
Tata Electronics announced that it has restricted internal access and is conducting a forensic investigation into the incident. Paolo Pescatore, founder of technology research firm PP Foresight, stated that a leak of this scale 'is generally not a quick hit-and-run attack.' According to Pescatore, attackers may have moved unnoticed between systems due to a foothold within the organization, compromised credentials, or weak access controls.
Pescatore said that the access being through a supplier rather than directly at Apple highlights that cybersecurity is only as strong as the weakest link in the supply chain.
Who Is World Leaks?
World Leaks is a ransomware group known for the 'hack and leak' model. It threatens to publish stolen data if ransom is not paid. The group claimed to have stolen 1.3 TB from Dell in July and 1.4 TB from Nike in January.
Who Was Affected?
The stolen data consists largely of corporate information. There is no indication yet that consumer payment information or user data was compromised. In June, Apple announced that it would release some software updates earlier than planned due to developments in AI cybersecurity; however, it is unknown whether these updates are related to the leak.
The parties most affected by the attack were Tata Electronics and Apple. Pescatore said, 'Apple's product secrecy and supplier intelligence have been damaged; Tata faces questions about cybersecurity resilience.'
Impact on Apple's India Strategy
In 2025, India assembled about a quarter of the world's iPhones (55 million units). This is a big jump from four years ago. Pescatore stated that the leak will not derail Apple's India strategy but will raise questions about whether new production centers can meet operational secrecy and cybersecurity reliability expectations.
After the COVID-19 pandemic and US-China trade tensions, Apple turned to Indian partners to diversify production. Tata began iPhone assembly operations in 2023 and grew rapidly. While this growth means Apple's sensitive production data is now concentrated in a single partner, the major leak demonstrated the scale of the risk. Cybersecurity researcher Rajshekhar Rajaharia said that 'other hacker groups may also launch attacks in the future' and recalled the ransomware attack on Jaguar Land Rover, owned by the Tata group.