What did the leak reveal?
More than 630 gigabytes of confidential data belonging to Tata Electronics, one of Apple's key suppliers in India, was stolen and published by the ransomware group World Leaks. The leak includes details of many components of the iPhone 18 Pro, from the main circuit board to battery and camera modules, as well as supplier information and photos of the model.
According to Reuters, World Leaks published over 200,000 files on its dark web leak site on June 12. Tata Electronics confirmed the cybersecurity incident to the public.
How did the attack happen?
Tata Electronics stated that it has restricted internal access and is conducting a forensic investigation into the incident. Paolo Pescatore, founder of technology research firm PP Foresight, noted that a leak of this scale is "usually not a quick hit-and-run attack." According to Pescatore, the attackers may have moved undetected between systems thanks to a foothold within the organization, compromised credentials, or weak access controls.
Pescatore said that the access being gained through a supplier rather than directly at Apple highlights that cybersecurity is only as strong as the weakest link in the supply chain.
Who is World Leaks?
World Leaks is a ransomware group known for its "hack and leak" model. It threatens to publish stolen data if ransoms are not paid. The group claimed to have stolen 1.3 terabytes of data from Dell in July and 1.4 terabytes from Nike in January.
Who was affected?
The stolen data largely consists of corporate information. There is no indication yet that consumer payment information or user data was compromised. Apple announced in June that it would release some software updates earlier than planned due to developments in AI cybersecurity; however, it is unknown whether these updates are related to the leak.
The parties most affected by the attack are Tata Electronics and Apple. Pescatore said, "Apple's product secrecy and supplier intelligence have been damaged; Tata faces questions about its cyber resilience."
Impact on Apple's India strategy
India assembled about a quarter of all iPhones worldwide (55 million units) in 2025. This represents a major leap from four years ago. Pescatore stated that the leak will not derail Apple's India strategy, but it will raise questions about whether new production centers can meet expectations for operational secrecy and cyber reliability.
Apple turned to Indian partners to diversify production after the COVID-19 pandemic and US-China trade tensions. Tata began iPhone assembly operations in 2023 and grew rapidly. While this growth means Apple's sensitive production data is now concentrated with a single partner, the major leak has shown the scale of the risk. Cybersecurity researcher Rajshekhar Rajaharia said, "Other hacker groups may also launch attacks in the future," and recalled the ransomware attack on Jaguar Land Rover, which is owned by the Tata group.