World Leaks has posted data on its dark web extortion site, claiming it was stolen from Tata Electronics, which assembles Apple iPhones in India. Tata confirmed the breach on June 23, 2026.

The dump includes manufacturing data for Apple products, including internal component schematics, PCB designs, material specifications, and SDK files.

World Leaks is a direct rebrand of Hunters International, which shut down its ransomware operation in July 2025 after deciding the ransomware model was no longer profitable. The group ditched encryption entirely and now runs as a pure extortion platform — steal files, threaten to publish, collect the ransom.

The read-across from Dell’s claimed 1.3 TB breach in July 2025 and Nike’s 1.4 TB claim in January 2026 is hard to ignore. World Leaks operates as Extortion-as-a-Service, giving affiliates custom tools to automate data theft and pick their own targets. Dell, Nike, and now Apple’s primary iPhone assembler in India: World Leaks affiliates are clearly hunting premium supply chain names.

Tata says operations are unaffected. Apple hasn’t responded, though it’s reportedly investigating. The stolen files were accessible on the dark web since at least June 10.

Diana Kowalski