WhatsApp Channel Join Now
Telegram Group Join Now

Relevance: GS-III (Internal Security, Cyber Security, Energy Infrastructure) Source: MeitY & Security Reviews, 2026

Kudankulam Data Leak: Are India’s Nuclear Plants Safe from Cyberattacks?

1 · What is the news in simple words?

Recently, reports revealed that highly sensitive engineering blueprints of the Kudankulam Nuclear Power Plant (KKNPP) in Tamil Nadu were leaked onto the dark web by a ransomware extortion group called World Leaks.

This caused major alarm across the country! However, there is a catch: the hackers did not hack the nuclear plant itself. Instead, they stole the data by hacking into a server belonging to a third-party private contractor (Reliance Infrastructure) that was helping build parts of the plant. Let us break down what this means for your UPSC preparation!

2 · What Was Leaked and Are We Safe?

Whenever a cyberattack touches critical infrastructure like atomic energy, it is natural to worry. Here is a clear picture of what was actually exposed versus what remained safe:

What Got Leaked?
Support System Blueprints
Over 19,000 files related to Kudankulam were exposed. These include floor layouts, cooling systems, and ventilation designs for conventional buildings (known as the Balance of Plant), dating from 2016 to 2025.
What Stayed Safe?
The Core Nuclear Reactor
NPCIL confirmed that the active nuclear reactors and core safety controls were completely untouched. Why? The reactor cores are built with Russia’s Rosatom and operate on totally isolated, closed networks!
The Real Danger
Mapping Vulnerabilities
Even though the radioactive core is safe, leaking detailed floor plans gives hostile countries or terrorists a ready-made “map” of our support systems, which could be used to plan future physical or cyber sabotage.
The Missing Link
Third-Party Contractors
This incident highlights a major loophole: while government reactors are tightly guarded, our private IT and construction contractors are “soft targets” with weaker cybersecurity!

  • Not the First Time: Back in 2019, Kudankulam’s administrative computer network was hit by a malware called Dtrack, linked to a North Korean hacking group.
  • The Way Forward: India urgently needs to mandate a ‘Zero-Trust’ cybersecurity framework not just for government plants, but for every single private contractor and vendor involved in national security projects.

UPSC Prelims Quick Facts
KKNPP Basics Kudankulam is India’s largest nuclear power facility, located in Tamil Nadu. It uses VVER pressurized water reactors built in collaboration with Russia’s Rosatom (targeting 6,000 MW total capacity).
CERT-In Indian Computer Emergency Response Team. Operating under MeitY, it is the national nodal agency responding to cyber breaches and securing digital infrastructure.
NPCIL Nuclear Power Corporation of India Limited. A public sector enterprise under the Department of Atomic Energy (DAE) responsible for running India’s nuclear reactors.
Air-Gapped Network A security measure where critical computers (like nuclear control rooms) are physically completely disconnected from the internet and unsecured administrative networks to prevent remote hacking.
Balance of Plant (BoP) All the supporting and conventional equipment in a power plant (like cooling towers, ventilation, and wiring) excluding the primary nuclear reactor itself.

MCQ Practice Question
Q. With reference to India’s nuclear energy infrastructure and cybersecurity mechanisms, consider the following statements:

  1. The Kudankulam Nuclear Power Plant (KKNPP) is being developed in technical collaboration with France and utilizes Pressurized Heavy Water Reactors (PHWRs).
  2. An ‘air-gapped’ computer network refers to a system that connects to the internet only via encrypted, satellite-based communication channels.
  3. The Nuclear Power Corporation of India Limited (NPCIL) functions under the administrative control of the Department of Atomic Energy (DAE).

Which of the statements given above is/are correct?
(a) 1 and 2 only    (b) 3 only    (c) 2 and 3 only    (d) 1, 2 and 3

Answer: (b) 3 only

  • Statement 1 — Incorrect: Kudankulam is developed in collaboration with Russia (Rosatom), not France! Also, it utilizes VVER (Water-Water Energetic Reactor) technology, which are Pressurized Light Water Reactors, not PHWRs.
  • Statement 2 — Incorrect (the trap): An air-gapped network has zero internet or external network connection whatsoever—not even satellite or encrypted links! It is physically isolated to ensure total cybersecurity.
  • Statement 3 — Correct: NPCIL is indeed the public sector enterprise under the Department of Atomic Energy responsible for designing, building, and operating nuclear power plants in India.
Ajmal IAS APSC Foundation Course

Recent Posts

Ajmal IAS APSC Foundation BATCH
Ajmal IAS APSC Foundation Course

Start Yours at Ajmal IAS – with Mentorship StrategyDisciplineClarityResults that Drives Success

Your dream deserves this moment — begin it here.