Tata Electronics, an Indian assembler and supplier for Apple, suffered a ransomware data breach that exposed thousands of confidential company files [1].

This breach represents a significant security failure in Apple's global supply chain. The exposure of unreleased hardware designs could allow competitors to gain insights into future product roadmaps, or enable counterfeiters to produce more accurate clones of upcoming devices.

The attack was carried out by a ransomware group known as “World Leaks” [2]. The group targeted Tata Electronics facilities in India, where the company handles critical assembly and supply tasks for the tech giant [1]. Reports said the breach was enabled by insufficient internal access controls within the supplier's network [2].

Among the stolen data are design schematics for the iPhone 18 Pro and supplier-mapping documents [1]. While thousands of files were compromised [1], more than 200 files have already been posted on the dark web by the attackers [3].

In response to the incident, Tata Electronics has moved to tighten its internal controls. The company is restricting system access to prevent further unauthorized data exfiltration [1]. The breach was first reported on June 26, 2026 [1].

Beyond Apple, reports said the security breach at Tata Electronics may have affected other technology giants, including Tesla [2]. This suggests the vulnerability may have extended across multiple client portfolios managed by the Indian firm.

“Thousands of confidential Apple files, including iPhone 18 Pro design schematics, were exposed.”

This incident highlights the 'weakest link' vulnerability in high-security hardware ecosystems. While Apple maintains rigorous internal security, its reliance on third-party manufacturers in India creates an expanded attack surface. The leak of iPhone 18 Pro schematics suggests that ransomware groups are now specifically targeting the supply chain to obtain high-value corporate intelligence rather than just encrypting data for profit.