Tata Electronics confirms breach after alleged Apple, Tesla leaks

• World Leaks ransomware group claims to have published more than 200,000 files.
• Group claims the cache comprises 204,341 files totaling roughly 630.4 GB.
• Tata did not say whether it is negotiating with the group or disclose the amount demanded.

Tata Electronics confirmed it has detected a cybersecurity incident affecting some of its systems, after the World Leaks ransomware group claimed to have published more than 200,000 files allegedly tied to Apple and Tesla, including manufacturing records, technical drawings and employee passport scans.

“A few weeks ago, Tata Electronics identified a cybersecurity incident on some of our systems,” the Indian manufacturing giant said in a statement.

“Our response protocols were deployed immediately, and the incident has had no impact on our operations across businesses, which remain unaffected.” The company did not specify which systems were accessed, whether data was exfiltrated, or if the incident is connected to the files posted by World Leaks.

World Leaks appears to have added Tata Electronics to its dark web leak site on June 12. The group claims the cache comprises 204,341 files totaling roughly 630.4 GB. Security researchers who reviewed samples said they found documents referring to Apple are manufacturing processes and Tesla’s engineering projects.

Breach references

They reported hundreds of references to Apple and Tesla, including folders labeled “com.apple.factorydata,” documents marked “proprietary and confidential,” and one file tagged “TRADE SECRET” that contained drawings linked to Project Highland, Tesla’s internal codename for its revamped Model 3 sedan.

Screenshots and listings also pointed to a wide range of sensitive operational materials, from PDFs, spreadsheets and slide decks to energy bills, factory licenses, “War Room” documents, and files dated as late as May of this year.

Other samples appeared to include copies of employee passports, internal emails and cryptographic materials such as certificates, key files and event logs spanning several years. Folder names referenced Equipment Data, IATF Audit Documents, Maintenance Engineer reports and dozens of SOPs covering machine setup, inspection and manufacturing processes.

Apple said it is investigating the incident, while Reuters reported Tata received a ransom demand related to the breach. Tata did not say whether it is negotiating with the group or disclose the amount demanded. Additional references in the file listing to Pegatron, Foxconn and Qualcomm—key firms in Apple’s supply chain—though there is no evidence those companies were compromised.

Tata Electronics is a major part of Apple’s manufacturing footprint in India, accounting for roughly a third of iPhone production in the country, with Foxconn producing the remainder. Beyond Apple, Tata supplies Tesla and other clients with components including iPhone back panels, metallic enclosures, circuit board parts and fully assembled devices.

The broader Tata Group has faced cyber challenges in recent years, including a third‑party breach involving Tata Consultancy Services and a separate attack that disrupted Jaguar Land Rover operations, underscoring the cascading risk large supply chains face from ransomware groups.

Tata Electronics said its operations remain unaffected as it continues to investigate. Apple and Tesla did not immediately respond to requests for additional comment.