Cyberattack Exposes Apple and Tesla Supply-Chain Data

On 22 June 2026, Tata Electronics confirmed a cybersecurity incident after the extortion group World Leaks published more than 630GB of reportedly stolen data, comprising over 204,000 files. The material appears to include Apple supplier specifications, Tesla drawings marked as trade secrets -  including material tied to Tesla's Project Highland, the codename for the revamped Model 3 - as well as employee passport scans, emails and system logs. Tata, which assembles about a third of Apple's iPhones in India, said it detected the incident several weeks earlier, activated its response procedures and suffered no operational disruption. It also confirmed receiving a ransom demand, while Apple is investigating.

The incident highlights the concentration of cyber risk within strategic technology supply chains. Tata holds sensitive manufacturing information belonging to multiple global companies, so a single supplier breach can expose intellectual property, employee data and unreleased product designs across several organisations at once. This is not an isolated incident for the group: Tata's Jaguar Land Rover subsidiary was hit by ransomware in September 2025, halting production for six weeks - a second major cyber incident within a year that points to a pattern of exposure rather than a one-off failure.

The central vulnerability is both the unauthorised access to Tata's systems and level of visibility granted to high-trust suppliers. As Apple and Tesla depend on a smaller number of manufacturing partners, weaknesses in access controls, network segmentation or data governance can create disproportionate downstream exposure. The breach demonstrates how compromising one supplier can provide threat actors with intelligence on several companies without directly penetrating their networks.

By Alexandra Ryabov

July 2026