NPCIL says no sensitive data breach at Kudankulam Nuclear Power Project

NPCIL clarified that no sensitive data breach occurred at Kudankulam Nuclear Power Project, stating leaked files relate only to conventional infrastructure. The agency said nuclear safety systems remain unaffected, while investigations by NPCIL and CERT-In continue into the reported cyber incident

Chennai: The Nuclear Power Corporation of India Limited (NPCIL) said there had been no breach of sensitive data at the Kudankulam Nuclear Power Project (KKNPP), stating that the information reportedly available in the public domain pertains only to conventional infrastructure and has no connection with nuclear safety or nuclear security systems.

In a statement issued by Executive Director (Corporate Communications) Prateek Agarwal, NPCIL said the engineering, procurement and construction contract for the project’s common service facilities, known as the Balance of Plant package, had been awarded to Reliance Infrastructure Limited through a public tender process.

---

According to the statement, the scope of the contract covers engineering, procurement, construction and commissioning of common service facilities that are conventional in nature and are typically found in thermal power plants and other process industries. NPCIL stressed that these systems are not related to nuclear safety or nuclear security.

The corporation said that, as part of the public tendering process, it had provided indicative drawings and technical specifications to bidders.

Based on these inputs and project requirements, Reliance Infrastructure prepared detailed engineering drawings in consultation with the respective original equipment manufacturers. NPCIL said the designs submitted by Reliance Infrastructure were reviewed by the corporation and accepted only after ensuring that they met all technical specifications.

The statement came amid reports that engineering-related project files linked to the Kudankulam Nuclear Power Project had been accessed following a cyber incident involving infrastructure associated with a contractor.

NPCIL reiterated that the documents in question relate only to conventional Balance of Plant facilities and do not concern reactor operations, nuclear safety systems or any sensitive security infrastructure. Reliance Infrastructure had secured the contract in 2018 for infrastructure works related to Kudankulam Units 3 and 4, which are currently under construction.

Investigations into the reported cyber incident are being carried out by NPCIL and the Indian Computer Emergency Response Team (CERT-In). Kudankulam currently operates two 1,000 MW Russian-designed VVER reactors, while four additional units are under construction. Once completed, the project is expected to become India’s largest nuclear power park with a total installed capacity of 6,000 MW.