Milestone crossed: The Financial Fraud Risk Indicator (FRI) has prevented suspected cyber fraud transactions of over ₹5,000 crore.
Core facts
What FRI is: The Financial Fraud Risk Indicator is a real time risk assessment framework. It flags whether a mobile number may be linked to cyber crime or fraud.
Administering body: The Department of Telecommunications (DoT) developed and operates it. It launched on 22 May 2025.
Risk classes: FRI classifies mobile numbers into three categories. These are Medium, High and Very High risk.
Data sources: It draws on citizen reports through Sanchar Saathi, the National Cybercrime Reporting Portal, telecom operators and financial institutions.
Use by institutions: Banks, payment providers, insurers and pension entities use the risk signal for transaction monitoring.
Amount protected: FRI prevented ₹5,043.73 crore in suspected fraud as of August 2026.
Recent record: Over ₹2,000 crore was prevented between April and August 2026. More than 1,600 organisations are on the platform.
Static Context
The Digital Intelligence Platform was launched by the Department of Telecommunications in 2024. FRI operates within it.
Sanchar Saathi is a citizen portal to report suspected fraud communication and to block lost or stolen mobile handsets.
The National Cybercrime Reporting Portal is run by the Indian Cyber Crime Coordination Centre (I4C) under the Ministry of Home Affairs.
Prelims angle
FRI custodian: Department of Telecommunications, within the Digital Intelligence Platform.
Related platforms: Sanchar Saathi, National Cybercrime Reporting Portal and I4C are frequently tested.
Mains angle
GS3, internal security: A question can assess how real time data sharing between telecom and banking systems strengthens India’s response to cyber financial fraud.
Matching Previous Year Question
“No direct Prelims PYQ on financial fraud prevention was traced in the provided files. Closest Microtheme: Cyber Security (Internal Security).”
“[2022, GS3, 10 marks] What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.”
Artificial Intelligence (AI) is now amplifying cyber threats across the cyber kill chain at speed, scale and sophistication, and is developing the ability to act as an autonomous agent that identifies, plans, adapts and carries out offensive cyber operations. The shift follows the fastest technology adoption on record: the Internet took 15 years to reach a billion users, and ChatGPT did so in three. The tension is that AI capability is concentrated in very few countries, so the same technology that raises the threat also determines who can defend against it. India’s indigenous AI ecosystem lags the United States and China across the entire AI stack, leaving it exposed on both sides of that equation.
What is the cyber kill chain?
Definition: The cyber kill chain is the sequence of stages an attacker must complete to succeed, running from reconnaissance on a target, through weaponisation of malicious code, to command and control of the compromised system.
Why the framework matters: Defence has traditionally worked by breaking any one link in that chain, since an attack that fails at one stage cannot proceed to the next.
What AI changes: AI is now compressing or automating several stages at once, so breaking a single link no longer stops the sequence.
How is AI amplifying offensive cyber operations?
Reconnaissance is automated: Gathering information about a target once depended on humans, and research shows ChatGPT models being used to mine social media for precise details to craft AI generated phishing emails.
Deepfakes are now real time: AI is generating real time deepfakes, deepening confusion about what is authentic online.
Social engineering scales: AI enabled social engineering, the use of AI to trick or persuade people into taking harmful actions, no longer requires a human operator per target.
Malware no longer holds a fixed shape: Large language models (LLMs) can autonomously generate, modify and restructure polymorphic malware to suit the situation, unlike traditional malware, which relies on fixed signatures and predictable patterns.
An AI has already run an attack chain: In September 2025 Anthropic claimed a Chinese state sponsored group, GTG-1002, had used Claude Code as an autonomous cyber agent across multiple stages of an attack, in what the company called the first reported case of an AI orchestrated cyber espionage campaign.
Why does autonomous vulnerability discovery change the risk?
Zero-days are being found at scale: Anthropic’s latest frontier model, Claude Mythos Preview, has identified thousands of zero-day vulnerabilities, meaning flaws previously unknown to developers, across major operating systems and browsers, many of them critical.
It builds the exploits too: The model developed related exploits largely without human intervention, collapsing the gap between finding a flaw and being able to use it.
Hardened systems are not exempt: It found a 27 year old vulnerability in OpenBSD, an operating system reputed to be highly security hardened and widely used to run firewalls and critical infrastructure.
Industrial systems are the exposed surface: Such vulnerabilities are especially dangerous for Operational Technology (OT) and Industrial Control Systems (ICS), the computing that governs nuclear facilities, energy grids, pharmaceutical manufacturing, chemical processing, oil refineries and communication networks.
Exposure grows with integration: That infrastructure becomes more exposed as it integrates further with AI, so the adoption that improves efficiency also widens the attack surface.
Why do old cyber defences no longer hold?
Signature matching fails against shape shifting code: Traditional antivirus looks for known malware fingerprints, which malware that constantly changes and adapts no longer presents.
Static patching is too slow: Security patches written for known vulnerabilities are far less effective when new flaws are discovered and weaponised faster than patch cycles run.
AI defence works differently: AI in cybersecurity enables real time threat detection, automated response and large scale data analysis, mitigating risks faster than human led triage.
The divide has shifted: The real AI divide is not about who uses AI but about who builds it and who controls its development, which is why cybersecurity capability now tracks AI capability.
How exposed is India?
A nuclear plant’s data was posted: The ransomware group World Leaks claimed to have stolen and posted data related to India’s largest nuclear plant, Kudankulam, including blueprints of facility parts and supplier details.
The ranking moved sharply: Cyber intelligence firm CloudSEK’s 2024 report placed India as the second most cyber attacked nation after the United States, and its 2025 report placed India sixth.
State backed actors targeted defence during a conflict: During Operation Sindoor, Pakistan backed threat actors such as APT36 targeted India’s critical sectors, including the Ministry of Defence, the Army, the Navy and the Defence Research and Development Organisation (DRDO).
A new target class appeared: The same campaign targeted Bharat Operating System Solutions (BOSS) Linux for the first time, extending the attack surface to India’s indigenous operating system.
Can India defend a cyberspace built on an AI stack it does not own?
The ecosystem is incremental: India’s indigenous AI ecosystem remains incremental and lags well behind the United States and China across the AI stack.
The gap is at every layer: The shortfall runs across foundational models, graphics processing units, chip design and large scale data centre infrastructure, so no single procurement closes it.
Dependence is the security problem: The lag leaves India heavily dependent on the United States and other technologically advanced countries for the very tools its defence now requires.
Capability determines both roles: Countries with leading AI ecosystems gain a greater ability both to conduct sophisticated cyber campaigns and to defend against them, so dependence caps India’s ceiling on defence as well as deterrence.
What has India done so far?
CERT-In has shifted its methods: The Indian Computer Emergency Response Team (CERT-In), the national agency for responding to cyber security incidents, has since 2025 adopted AI driven threat detection, cyber resilience measures, trusted AI frameworks and citizen centric malware mitigation.
A specific advisory was issued: In April 2026 it issued an advisory for organisations on defending against AI driven cyber risks.
The advisory’s operative instructions: Recommendations included “removing unnecessary internet-facing services” and treating every newly discovered vulnerability as something that “could be exploited within hours, not weeks”.
Governance work is at the framework stage: The Ministry of Electronics and Information Technology (MeitY) is exploring a consent based framework for synthetically generated content, alongside curbs on agentic AI autonomy and clearer liability frameworks for AI models.
Challenges to India’s AI-enabled cyber defence
Defence rests on advisories rather than obligations: CERT-In’s guidance to organisations is recommendatory, so a private operator of critical infrastructure faces no penalty for ignoring it. Eg. The April 2026 advisory asked organisations to remove unnecessary internet facing services, with no compliance audit attached. Fix. Convert the advisory content into mandatory, audited security baselines for power, banking, telecom and healthcare operators under the Information Technology Act, 2000.
Compute dependence caps defensive AI: Running real time detection models at national scale needs domestic graphics processing unit capacity that India does not have. Eg. India’s shortfall spans foundational models, chip design and large scale data centre infrastructure alike. Fix. Prioritise sovereign compute for security workloads specifically, reserving a share of publicly funded AI infrastructure for CERT-In and sector CSIRTs.
Attribution is harder when the attacker is an agent: An AI orchestrated campaign leaves a machine’s traces rather than an operator’s, which weakens the evidentiary basis for a state response. Eg. The GTG-1002 campaign was identified by the model provider, not by a victim’s own forensics. Fix. Mandate model providers serving Indian users to report detected misuse of their systems for offensive operations, on the six hour breach reporting model already in force.
Legacy industrial systems cannot be patched quickly: Control systems in refineries and grids run on decade old software where a patch requires a plant shutdown. Eg. A 27 year old OpenBSD flaw survived in software widely used to run firewalls and critical infrastructure. Fix. Require network segmentation and one way data diodes between industrial control networks and corporate networks, so an unpatched system is not internet reachable.
The skills base is thin at the state level: Cyber investigation and forensics capacity is concentrated in central agencies, while most first response happens at state police stations. Eg. Citizen fraud complaints route through the national helpline before reaching local police with the capacity to act. Fix. Establish State Computer Emergency Response Teams and cyber forensic laboratories with dedicated cyber police training academies in every State.
Conclusion
AI has moved cyber conflict from a contest between attackers and defenders to a contest between countries that build AI and countries that buy it. India sits on the wrong side of that line while carrying one of the world’s largest attack volumes, from a ransomware posting of Kudankulam plant data to state backed targeting of its defence establishment. India cannot build the AI stack quickly, so the immediate requirement is that AI and cybersecurity stop being treated in silos and are handled as interconnected strands of policymaking: AI for cyber defence, and cybersecurity for AI.
“[2022, GS3, 10 marks] What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.”
The Supreme Court passed an order on 4 August 2026 on the digital arrest scam. It directed banks, states and regulators toward faster action on mule accounts and cyber fraud. The scams persist because they are run largely from overseas hubs.
What is the digital arrest scam?
Definition: Fraudsters impersonate authorities and coerce victims into transferring money under threat of fake arrest. There is no legal basis or process called digital arrest.
Targets: Older victims fall prey through deference to authority and fear of legal trouble.
New targets: Scammers now also target youth and professionals, and senior citizens whom advisories have not reached.
Why are digital arrests keep happening?
Human Psychology & Social Engineering: Cybercriminals use social engineering tactics to manipulate people into revealing sensitive information. Fraudsters also exploit emotions like fear (threatening legal action), excitement (fake lottery wins), or urgency (fake emergency fund requests). Cybercriminals often impersonate trusted sources such as banks, government agencies, or even close friends.
Weak Cybersecurity Practices: Common weaknesses include weak password and credentials use, unpatched software and system and poor security hygiene.
Rapidly Evolving Cybercrime Techniques: Cybercriminals constantly evolve their methods to stay ahead of security measures.
Digital Payments & Financial Fraud Risks: With the rise of digital transactions, cybercriminals have developed sophisticated methods to exploit online payment systems like fake UPI requests & QR codes, card skimming & SIM swaps and crypto & investment scams.
Dark Web & Cybercrime Networks: The dark web serves as a marketplace for stolen data, malware tools, and illegal activities. Cybercrime has become an organized industry where criminals buy and sell stolen data and identity theft, organised cyber-crime syndicates and also offer Ransomware-as-a-Service (RaaS) as well.
Lack of Strong Cyber Laws & Enforcement: Despite increasing cyber threats, many scams go unpunished due to slow law enforcements response, cross border crime challenges and lack of cyber crime awareness and policies.
What did the Supreme Court order?
Debit holds: It directed the Reserve Bank of India (RBI) to circulate a standard operating procedure for temporary debit holds on mule accounts.
State action: States must notify cybercrime coordination centres and operationalise electronic Zero FIRs.
Compensation: An inter departmental committee must examine a victim compensation framework.
Data cited: Complaints on the National Cyber Crime Reporting Portal fell from 1,23,672 in 2024 to 16,377 in the first half of 2026.
Recovery: Money was restored in 36,290 cases involving Rs 18.05 crore.
What are the key terms in the response?
Indian Cybercrime Coordination Centre (I4C): the nodal body coordinating action against cyber fraud and running the reporting portal.
Mule account: a bank account used to receive and move fraud proceeds across states.
Zero FIR: a First Information Report that can be filed at any police station regardless of jurisdiction.
MuleHunter.AI: a detection system used in over 20 banks to flag mule accounts.
Why do these scams persist despite falling complaints?
Nimble methods: Fraudsters route calls through SIM boxes to mask origin and appear as Indian numbers.
Deepfakes: They deploy deepfakes on video calls to dupe victims and stay untraceable.
Few convictions: Convictions are rare as many schemes are run from overseas scam compounds.
Overseas hubs: Compounds operate in Myanmar, the wider Golden Triangle and Cambodia, some with official patronage.
Trafficking link: Indians are trafficked and coerced to run digital crimes against fellow citizens.
Conclusion
Detection systems and swift account freezes limit the damage even when perpetrators escape conviction. The core problem lies in overseas scam compounds beyond domestic law enforcement reach. New Delhi must use diplomatic pressure with China, the United States and ASEAN to compel host countries to act.
Back2Basics
Electronic-Zero FIR (e-zero FIR)
An e-Zero FIR is an automated digital system in India that converts high-value cyber financial fraud complaints (above ₹10 lakh) filed via the National Cyber Crime Reporting Portal or the 1930 helpline directly into a Zero FIR. It eliminates jurisdictional delays during the critical “golden hour” for fund recovery
Key Features and Workflow
Automatic Registration: Eligible financial fraud reports trigger an instant e-Zero FIR without requiring an initial physical station visit.
System Integration: Combines the I4C portal, state e-FIR mechanisms, and the NCRB’s Crime and Criminal Tracking Network & Systems (CCTNS).
Auto-Routing: The system instantly routes the electronic document to the correct territorial cybercrime station based on the victim’s location.
Mandatory Follow-Up: Complainants must visit the designated local police station within three days to sign and convert the e-Zero FIR into a regular FIR under the Bharatiya Nagarik Suraksha Sanhita (BNSS).
PYQ Relevance
[UPSC 2022] What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.
Linkage: The PYQ tests India’s cyber security framework and response to cybercrime. The article highlights recent measures to strengthen India’s response to digital arrest scams and cyber fraud.
The Supreme Court directed the Centre, States, and Union Territories to implement Standard Operating Procedures (SOPs) within four weeks to curb digital arrest cyber fraud, including freezing mule accounts, strengthening grievance redressal, and improving cybercrime coordination.
What is a Digital Arrest Scam?
A cyber fraud where scammers impersonate police or enforcement agencies through video/audio calls.
Victims are falsely told they are under “digital arrest” and coerced into transferring money.
What is a Mule Account?
A bank account used to receive and transfer proceeds of cyber fraud.
Often opened by unsuspecting or paid individuals.
Banks can impose temporary debit holds to prevent fraudulent withdrawals.
What is the Indian Cyber Crime Coordination Centre (I4C)?
A nodal agency under the Ministry of Home Affairs (MHA) for coordinating India’s response to cybercrime.
Operates the National Cyber Crime Reporting Portal (NCRP) and the 1930 Cyber Helpline.
Supreme Court Directions
Reserve Bank of India (RBI) to issue SOPs for temporary debit holds on mule accounts.
States/UTs to operationalise:
State Cyber Crime Coordination Centres.
e-Zero FIR mechanism.
Strengthen grievance redressal, money restoration, and public awareness.
Challenges
Cross-border cybercrime networks.
Rapid movement of funds through mule accounts and cryptocurrencies.
Weak inter-agency coordination.
SIM spoofing and fake identities.
Low public awareness, especially among the elderly.
Value Addition
e-Zero FIR
Enables registration of a cybercrime complaint without jurisdictional barriers.
The complaint is later transferred to the appropriate police station.
Citizen Response to Financial Cyber Fraud
Call 1930 immediately.
Report the incident on the National Cyber Crime Reporting Portal (NCRP).
Early reporting increases the chances of freezing fraudulent transactions.
Back2Basics: Indian Cyber Crime Coordination Centre (I4C)
Parent Ministry: Ministry of Home Affairs (MHA).
Established: 2020.
Key Components:
National Cyber Crime Reporting Portal (NCRP).
1930 Financial Cyber Fraud Helpline.
Mandate: Coordinate law enforcement, banks, telecom operators, and other stakeholders to prevent and investigate cybercrime.
“[2017] In India, it is legally mandatory for which of the following to report on cyber security incidents? 1. Service providers 2. Data Centres 3. Body corporate (a) 1 only (b) 1 and 2 only (c) 3 only (d) 1, 2 and 3
Artificial Intelligence (AI) and cyber threats have merged into a single, compounding security risk that traditional defences cannot contain. AI-powered malware now adapts on its own, autonomous agents undermine established protocols, and the newest models can find and exploit vulnerabilities faster than humans. The deeper conflict is that the technology capable of defending systems is the same technology enabling attacks, while the rules to govern it remain undeveloped.
What is Agentic AI?
Definition: Agentic AI refers to systems that act autonomously to pursue goals, taking sequential actions with minimal human prompting. It differs from Generative AI, which produces content in response to a user request.
Significance: Autonomous agents can perform complex tasks once reserved for people. As agentic operations grow more sophisticated, threat levels rise further.
Working
Perception: Gathers real-time data from tools, screens, or sensors.
Reasoning: Uses large models to break a big goal into small steps.
Action: Uses external software or APIs to complete the work.
Learning: Adapts its future choices based on past results
What is Zero Trust?
Definition:Zero Trust is a security model that assumes no user or device is trustworthy by default, verifying every access request continuously. It replaces the older assumption that anything inside a network is safe.
Erosion: Malicious autonomous agents are positioned to undermine Zero Trust protocols. This aggravates insider threat vectors within organisations.
How is AI transforming cyber threats?
Adaptive malware: AI-powered malware can adapt and evolve in response to its environment. This makes it harder for traditional anti-virus software to detect. Example: Self-Modifying Code: Rewrites internal structures or instructions continuously to change file fingerprints
Vulnerability discovery: The latest AI systems can detect zero-day vulnerabilities across major operating systems. A zero-day is a software flaw unknown to the vendor and unpatched at the time of attack.
Capability transfer: Newer AI machines let rogue groups demonstrate capabilities once limited to nation states. This lowers the barrier to sophisticated attacks.
Dual-use warning: The World Economic Forum warns AI will strengthen cyber defences while also enabling more sophisticated automated attacks. The same model can render current Zero Trust protocols ineffective.
How is AI reshaping warfare?
Precision targeting: AI-powered smart systems detect, track and predict missile trajectories with high accuracy. This was demonstrated in recent conflicts.
Autonomous munitions: Systems can independently identify and strike targets. This shifts elements of the kill decision away from human operators.
Multi-source intelligence: AI can fuse intelligence from photos, text, radio and electromagnetic signals. This denies adversaries a tactical advantage.
Cognitive core: Automated analytics platforms (such as Palantir Technologies or military software like Ukraine’s Delta) manage vast data inputs to recommend strikes and run logistics.
Drone accuracy: Software upgrades have pushed first-person view drone hit rates from roughly 30–50% up to 80%.
Where does the deeper tension lie?
Concentrated power: A handful of Western firms hold the most advanced models and behave as owners of future technology. Control over the mightiest technology is concentrating in a few private hands.
Governance vacuum: AI has the potential to become the dominant source of military and economic power. The rules to govern it remain in a fledgling state.
Escalating rivalry: The United States has accused China of stealing from its most advanced language model to build a rival. This reflects the intensity of the US-China technology competition.
What are the challenges to safe AI and cyber governance?
Hallucinations: Advanced models produce distortions and misleading outputs. Judgments built on them become unreliable and subjective.
Algorithmic bias: Biases creep into AI-driven decisions, including a bias towards national security framing. Unrestricted reliance on such outputs magnifies risk.
Algorithmic radicalisation: AI platforms can push opinion makers towards extreme views. Guarding against this requires active oversight.
Warning-understanding gap: In defence sensing, AI-dictated warnings can outrun proper understanding of reality. Acting on premature warnings carries strategic danger.
Loss of human control: Increasingly capable models and robots are replacing human roles in critical decisions. Keeping machines under human oversight is becoming harder.
Conclusion
The convergence of AI and cyber capability creates a civilisation-scale threat because the technology that defends systems is the same one that attacks them, and no adequate governance exists. The single most important precondition, human oversight backed by enforceable rules, is missing, and altruism from AI firms is not a substitute for it.
Back2Basics
CERT-In:
Indian Computer Emergency Response Team is the national nodal agency for cyber security incidents under the Ministry of Electronics and Information Technology.
Statutory basis: Operates under the Information Technology Act, 2000.
Generative vs Agentic AI
Generative AI
Agentic AI
Creates content (text, images, code, audio) from user prompts.
Performs tasks autonomously to achieve a goal.
Responds to instructions but does not independently plan actions.
Plans, reasons, makes decisions, and executes multi-step workflows.
Output-focused.
Outcome-focused.
Requires frequent human prompts for each step.
Needs minimal human intervention after receiving the objective.
Limited memory and action capability.
Can use memory, APIs, tools, and feedback to adapt actions.
Example: ChatGPT writing an essay or generating code.
Example: An AI assistant that books travel, compares prices, sends emails, and updates the calendar automatically.
PYQ Relevance
[UPSC 2022] What are the different elements of cyber security? Keeping in view the challenges in cyber security, examine the extent to which India has successfully developed a comprehensive National Cyber Security Strategy.
Linkage: UPSC has examined India’s cyber security architecture and the challenges in developing a comprehensive cyber security strategy. The article shows how AI-powered cyber threats and autonomous agents demand an AI-enabled, adaptive cyber security framework beyond traditional defences.
A ransomware breach at Yotta Data Services, a third-party data-centre vendor for Reliance Infrastructure Ltd, led to the leak of 14.3 GB of operational data related to the Kudankulam Nuclear Power Plant on the dark web platform World Leaks. Nuclear Power Corporation of India Limited (NPCIL) states the breach did not touch core reactor or nuclear-security systems, but the incident exposes how strategic nuclear infrastructure remains vulnerable through third-party digital supply chains.
What exactly happened, and how did the breach occur?
Breach reported: Reports emerged that multiple gigabytes of data on Kudankulam Nuclear Power Plant operations were copied and leaked as part of a ransomware attack.
Point of infiltration: The infiltration targeted Reliance Anil Dhirubhai Ambani Group’s Reliance Infrastructure Ltd, not NPCIL directly.
Scale of leak: 14.3 GB of Kudankulam-related data formed part of a larger 1.2 TB dataset hosted on World Leaks.
World Leaks: World Leaks is a dark web site operated by cybercriminals who infect firms with ransomware and threaten to publish stolen data if a ransom is not paid.
Trigger for publication: The site claims the ransom was not paid, resulting in the data being leaked publicly.
Was the reactor or nuclear-safety systems compromised?
NPCIL’s position: NPCIL states the leaked files pertain only to Balance of Plant (BOP: conventional common service facilities of a power plant, distinct from the reactor core) and not to nuclear safety or security-related systems.
Reliance’s position: Reliance states no ransomware execution, data loss, or lateral movement occurred, despite confirming a partial breach of data hosted on Yotta’s servers.
Nature of leaked files: The files reportedly include equipment blueprints, supplier details, meeting and inspection records, and equipment reviews.
Insurance detail exposed: A $112 million insurance policy against terrorist attacks was among the leaked details, with the premium amount undisclosed.
Why does the official reassurance not fully resolve the concern?
Narrow definition of harm: Restricting concern to “core reactor systems” ignores that BOP data such as blueprints and inspection records can still aid reconnaissance or attack planning against a strategic facility.
Layered outsourcing risk: Reliance itself depends on a third-party vendor, Yotta, for data hosting, showing that critical infrastructure security depends on vendors several steps removed from NPCIL.
Self-assessment, not independent audit: Both Reliance and Yotta’s claims that no ransomware execution or lateral movement occurred rest on the vendor’s own internal forensic assessment, not an independent verification.
Transparency gap: The premium amount for the $112 million terrorism insurance policy remains undisclosed even after the leak, showing incomplete disclosure despite the reassurances offered.
What does the incident reveal about the plant’s strategic significance going forward?
Current capacity: Kudankulam has commissioned two 1,000 MWe VVER (a Russian-designed pressurised water reactor type) units, supplying up to two gigawatts, built in partnership with Russian firm Rosatom.
Expansion underway: The government plans four more units at the site, which would triple installed capacity, expanding the facility’s strategic value and its digital attack surface.
Gap between messaging and internal concern: The revelations have caused “absolute commotion” among plant officials internally, even as public statements downplay the breach’s significance.
Conclusion
The Kudankulam leak shows that reassurances confined to “core reactor safety systems” do not address the full risk profile of a strategic nuclear facility. This is because non-core operational data hosted through layered third-party vendors remains commercially and strategically sensitive. As Kudankulam’s capacity is set to triple, critical infrastructure protection frameworks need to extend cybersecurity accountability across the entire vendor supply chain, not the reactor core alone. Additionally this requires independent verification rather than self-reported vendor assessments.
PYQ Relevance
[UPSC 2023] What are the different elements of cybersecurity? Keeping in view the challenges in cybersecurity, examine India’s preparedness in preventing cyber attacks.
Linkage: The article highlights cybersecurity challenges in protecting India’s critical infrastructure from ransomware and third-party data breaches. The Kudankulam data leak underscores the need to strengthen cyber resilience, vendor security, and protection of critical infrastructure despite no compromise of reactor systems.
