Kudankulam Nuclear Power Plant data leak

Reports broke out that multiple gigabytes of data pertaining to operations at the Kudankulam Nuclear Power Plant had been copied and subsequently leaked as part of a ransomware attack.  

About Kudankulam Nuclear Power Plant (KKNPP)

• Location: Kudankulam, Tirunelveli district, Tamil Nadu.
• Status: India’s largest nuclear power installation.
• Construction commenced: 31 March 2002.
• Operators and partners: Developed jointly by the Nuclear Power Corporation of India Limited (NPCIL) and Russia’s Atomstroyexport.
• Reactor type: Russian-designed VVER-1000 pressurised water reactors.
• Planned capacity: Six units of 1,000 MW each, giving a total capacity of 6,000 MW.
• Unit 1: Synchronised with the electricity grid on 22 October 2013.
• Electricity tariff: NPCIL announced a tariff of ₹4.29 per kWh in 2015.
• Significance: It strengthens India’s nuclear-energy capacity, supports electricity generation in southern India and represents an important component of India–Russia civil nuclear cooperation.

About the Cyber Incident

• Suspicious activity was detected on a file server within a private cloud environment.
• The suspicious process was immediately terminated, and the affected server was isolated.
• The suspected ransomware was prevented from executing.
• No evidence of data encryption or lateral movement to other systems was found

Why Does the Kudankulam Data Leak Matter?

• Kudankulam is a strategically important and highly sensitive nuclear facility.
• It currently operates two Russian-designed VVER reactors of 1,000 MW each, providing up to 2 GW of electricity.
• Four additional reactors are planned, which would increase the plant’s installed capacity significantly.
• Any exposure of technical or operational information could create cybersecurity, national-security and infrastructure-safety risks.