IPhone 18 Pro Leak: India Opens Criminal Probe as Stolen Files Reveal C2 Modem Plans

India has opened a government investigation into the ransomware attack on Apple supplier Tata Electronics, escalating a corporate data breach into a national security issue. On July 3, IT Secretary S. Krishnan confirmed at a Confederation of Indian Industry cybersecurity summit in New Delhi that the incident was formally reported to CERT-In and is under active examination. The breach revealed engineering documents indicating the iPhone 18 Pro may ship with two different modem options depending on the region where it is sold. The article ties India’s role to supply-chain weight: Counterpoint Research projects India will manufacture about 26% of all iPhones globally in 2026, up from around 6% four years earlier. Tata entered iPhone assembly in 2023 and handles about one-third of iPhone production in India, with operations reportedly unaffected. The attackers were linked to World Leaks, a January 2025 rebranding of Hunters International, using a data-extortion model rather than file-encryption. World Leaks claimed responsibility on June 12, posting 204,341 files.