Tata Electronics Data Leak: What did MeitY said about reported cyber incident involving Apple iPhone 18?

The government is investigating the reported data leak involving Tata Electronics, a key supplier to Apple, with the Ministry of Electronics and Information Technology (MeitY) describing the matter as a cybercrime and saying it has been reported to the authorities.

Speaking on the sidelines of a CII conference on Friday, MeitY Secretary S. Krishnan said the government was examining the reported incident.

According to foreign media reports, hackers allegedly stole more than 630 GB of confidential data from Tata Electronics and later published parts of it on the dark web. Tata Electronics has not publicly confirmed the claims.

Government says investigation is underway

Responding to an ANI query on the reported Tata Electronics data leak, Krishnan said, "This is also a kind of cybercrime. We are investigating it....It has been reported to us."

His remarks came amid reports claiming that sensitive internal information linked to Tata Electronics had been leaked online by threat actors.

The government is examining the reported incident to ascertain its nature, extent and possible cybersecurity implications.

Foreign media reports claim hackers leaked confidential data

According to foreign media reports, hackers stole more than 630 GB of confidential data from Tata Electronics, one of Apple's major suppliers in India, before releasing the documents online.

The reports claimed the leaked files included confidential component details, supplier information and photographs of Apple's upcoming iPhone 18 Pro models, which are expected to launch in September.

The reports further said the data was allegedly posted on the dark web by a ransomware group after the cyberattack.

Reports say leak may expose Apple's supply chain

According to foreign media reports, the leaked documents reportedly reveal sensitive supplier arrangements and component information linked to Apple's manufacturing ecosystem.

The reports said such information could expose details of Apple's closely guarded global supply chain and potentially provide competitors, counterfeiters and other market participants with insights into the company's manufacturing network.

Tata Electronics has emerged as one of Apple's key manufacturing partners outside China, supplying components as well as assembling iPhones in India. The expansion forms part of Apple's efforts to diversify manufacturing while supporting India's growing electronics manufacturing ecosystem.

Foreign media reports claim over 200,000 files leaked

According to foreign media reports, the data leak allegedly involved more than 200,000 files that were posted on the dark web by the ransomware group World Leaks.

The reports claimed the files purportedly included component design papers related to older iPhone models, some Tesla parts, and documents linked to Taiwan Semiconductor Manufacturing Co. and Qualcomm, both of which supply components used in iPhones.

The reports said the alleged breach could affect confidential supplier relationships within Apple's global manufacturing operations.

Government also seeks explanation from messaging platforms

Separately, Krishnan said the government has sought an explanation from WhatsApp over its username feature, citing concerns that such functionality could facilitate cybercrime. Similar explanations have also been sought from other messaging platforms.

"The kind of encouragement that it provides or the facility it provides for committing more cybercrimes, which is a very serious issue... we have directed WhatsApp to explain why they have this feature, and likewise we have similarly sought explanations from others," he said.

On whether WhatsApp had requested additional time to respond, Krishnan said, "Not that I am aware of." He also said the government was examining legal and technological measures to address challenges posed by Virtual Private Networks (VPNs), noting that while guidelines require VPN providers operating in India to register, some continue offering services from outside the country, making enforcement more difficult.

"That is a techno-legal aspect. We have to look at both a technology solution in addition to just a legal solution," Krishnan said.

He added that the government was looking at both legal and technology-based solutions to ensure restrictions on applications are implemented effectively while addressing services operating outside India's jurisdiction.