Tata Electronics confirms data breach affecting Apple, Tesla supplier files

Tata Electronics, an Indian electronics and semiconductor manufacturer that supplies Apple and Tesla, has confirmed it suffered a cybersecurity incident, weeks after files allegedly taken from the company surfaced on a hacker forum. A company spokesperson said the breach was identified on some of its systems "a few weeks ago" and that response protocols were activated immediately. The spokesperson stated that the incident had "no impact on our operations across businesses, which remain unaffected."

The listing on the hacker forum claims to offer more than 630 gigabytes of data allegedly stolen from the company, spanning over 204,300 files. Files reviewed by TechCrunch appeared to include Apple supplier specifications and Tesla manufacturing documents, though the authenticity, provenance and completeness of the data could not be independently verified.

Cybersecurity researcher Rajshekhar Rajaharia said the data advertised on the forum included Outlook email conversations, SAP-related information, and documents purportedly tied to Tata Electronics customers, including Apple and Tesla.

Tata Electronics declined to address questions about the nature of the compromised data, how many individuals or organizations were affected, whether customers had been notified, or whether information belonging to clients such as Apple and Tesla was exposed.

Reuters reported that the company informed some employees at its iPhone assembly operations last week about the breach, and that Apple was investigating the matter. Reuters also reported that a ransom demand had been made to Tata Electronics. The breach has been linked to the ransomware group World Leaks, which has demanded payment for the data, described as comprising more than 2 lakh files totaling over 630 gigabytes.

Among the leaked documents are component design and specification papers tied to Apple and Tesla, along with emails, event logs and passport copies of employees, including foreign nationals. The files reportedly include a 52-page document outlining quality inspection standards for iPhone circuit board components, along with several folders connected to Tata’s iPhone assembly plant in Hosur, Tamil Nadu. Tesla-related material in the leak reportedly references parts used in the Model Y and internal drawings for the revamped Model 3 sedan.

A source indicated that Apple’s investigation into the breach is undergoing full analysis. Apple and Tesla did not respond to requests for comment.

Founded in 2020, Tata Electronics has become a significant contributor to India’s expansion of electronics manufacturing and semiconductor production, operating facilities across the country and employing more than 75,000 people, according to its parent company’s website. The firm has built partnerships with global companies including Apple, ASML, Intel, Qualcomm and Tesla, as manufacturers diversify supply chains beyond China and turn increasingly to India as a production hub.

Tata Electronics entered iPhone manufacturing in 2023 by acquiring the India operations of Taiwanese contract manufacturer Wistron, a longtime Apple supplier, and later acquired a 60% stake in the Indian unit of Pegatron, another major Apple manufacturing partner. The company also signed a semiconductor supply deal with Tesla in 2024.