Tata leak: TSMC and Qualcomm also affected Apfelpatient

The cyberattack on Apple's Indian manufacturing partner Tata Electronics is having wider repercussions. Tata has restricted access to sensitive systems and launched a forensic audit, while Apple's security team is now directly involved in the investigation. New findings also indicate that documents from TSMC and Qualcomm may be among the leaked data.

Earlier this month, it was revealed that confidential Apple documents had allegedly been leaked from Tata Electronics. More than 200,000 files, totaling over 630 gigabytes, ended up on the dark web as a result of the attack. Now, a Reuters report details how the company and its supplier are reacting to the incident – and makes it clear that the implications extend far beyond Apple.

Tata is taking action

In response to the incident, Tata Electronics restricted internal access to sensitive systems. Simultaneously, the company commissioned a global consulting firm to conduct a forensic audit to fully investigate the source of the leak. Apple's primary manufacturing partner in India also informed local authorities and affected customers, but did not publicly name the companies involved.

Apple gets involved

Unlike when the attack was first reported, Apple is now directly involved in the investigation. According to the report, the company's security team is working closely with Tata on short- and long-term measures to mitigate the impact of the attack and prevent future incidents. Apple has not yet commented publicly on the matter.

TSMC and Qualcomm are also in the data

Further analysis reveals the extent of the leak. According to reports, the published data contains at least 16 files and folders with alleged documents from TSMC and 23 from Qualcomm – both of which supply components used in iPhones.

Specifically, a document dated 2022 and labeled "TSMC Secret" is said to contain details of a reliability test of a TSMC component, including photographs. A document from the "Apple Silicon Engineering Group" from 2023 reportedly maps Apple part numbers to their corresponding TSMC numbers – including information on Apple employees involved in the document's history. A purported Qualcomm document from 2021, in turn, shows mechanical information on the functionality of a power management chip, including drawings watermarked "Confidential – May Contain Trade Secrets." Independent confirmation of the authenticity of these documents is pending.

A risk to Apple's entire supply chain

The incident highlights how vulnerable even tightly controlled manufacturing networks can be. With Apple production documents, quality control standards for iPhone circuit boards, internal emails, employee passport copies, and now also documents from key chip partners, the leak doesn't affect a single company, but an entire network of closely intertwined suppliers. For Apple, which is strategically expanding its manufacturing in India, this puts the security of its partners in sharper focus. The full extent of the consequences will likely only become clear during the ongoing audit. (Image: Shutterstock / Song_about_summer)