← threat actors
threat actor · not yet in the cluster map
world-leaks
2 stories · 1 in the wild · June 24, 2026 – July 16, 2026
evidence: 1 observed · 1 claimed
sectors
- critical infrastructure 1 · Jul 16
- energy 1 · Jul 16
- manufacturing 1 · Jun 24
- technology 1 · Jun 24
techniques
- data exfiltration 2 · Jul 16
- extortion 1 · Jun 24
attack phases seen
- Exfiltration 2 · Jul 16
- Impact 2 · Jul 16
what we reported, newest first, grouped by story
July 16, 2026
- The World Leaks extortion group dumped ~19,000 files (14.3 GB) tied to India's Kudankulam Nuclear Power Plant, reportedly including ventilation/cooling drawings, supplier and inspection records, and a control-room floor layout. Contractor Reliance Group confirmed a "partial breach" of data hosted by third-party provider Yotta; the leak does not appear to touch the Russian-built reactor cores. MarioNawfal (X), DailyDarkWeb (X)
· Jul 16 · claimed · Threat Activity
Jun 23 – June 24, 2026
- Tata Electronics confirmed a cyberattack weeks after the World Leaks extortion group claimed to have stolen and published confidential client documents — reportedly including Apple and Tesla files. World Leaks also listed Reliance Power, putting two Indian conglomerates on its portal within 24 hours. The Record, BleepingComputer.
· Jun 24 · observed · Data Breaches