💥Join UPSC 2027,2028 Mentorship (July Batch) + XFactor Notes & Microthemes PDF
Talk to Mentor

Civilsdaily

Login

Subject: Internal Security

  • How Serious Is the Kudankulam Data Leak

    Why in the News?

    A ransomware breach at Yotta Data Services, a third-party data-centre vendor for Reliance Infrastructure Ltd, led to the leak of 14.3 GB of operational data related to the Kudankulam Nuclear Power Plant on the dark web platform World Leaks. Nuclear Power Corporation of India Limited (NPCIL) states the breach did not touch core reactor or nuclear-security systems, but the incident exposes how strategic nuclear infrastructure remains vulnerable through third-party digital supply chains.

    What exactly happened, and how did the breach occur?

    1. Breach reported: Reports emerged that multiple gigabytes of data on Kudankulam Nuclear Power Plant operations were copied and leaked as part of a ransomware attack.
    2. Point of infiltration: The infiltration targeted Reliance Anil Dhirubhai Ambani Group’s Reliance Infrastructure Ltd, not NPCIL directly.
    3. Scale of leak: 14.3 GB of Kudankulam-related data formed part of a larger 1.2 TB dataset hosted on World Leaks.
    4. World Leaks: World Leaks is a dark web site operated by cybercriminals who infect firms with ransomware and threaten to publish stolen data if a ransom is not paid.
    5. Trigger for publication: The site claims the ransom was not paid, resulting in the data being leaked publicly.

    Was the reactor or nuclear-safety systems compromised?

    1. NPCIL’s position: NPCIL states the leaked files pertain only to Balance of Plant (BOP: conventional common service facilities of a power plant, distinct from the reactor core) and not to nuclear safety or security-related systems.
    2. Reliance’s position: Reliance states no ransomware execution, data loss, or lateral movement occurred, despite confirming a partial breach of data hosted on Yotta’s servers.
    3. Nature of leaked files: The files reportedly include equipment blueprints, supplier details, meeting and inspection records, and equipment reviews.
    4. Insurance detail exposed: A $112 million insurance policy against terrorist attacks was among the leaked details, with the premium amount undisclosed.

    Why does the official reassurance not fully resolve the concern?

    1. Narrow definition of harm: Restricting concern to “core reactor systems” ignores that BOP data such as blueprints and inspection records can still aid reconnaissance or attack planning against a strategic facility.
    2. Layered outsourcing risk: Reliance itself depends on a third-party vendor, Yotta, for data hosting, showing that critical infrastructure security depends on vendors several steps removed from NPCIL.
    3. Self-assessment, not independent audit: Both Reliance and Yotta’s claims that no ransomware execution or lateral movement occurred rest on the vendor’s own internal forensic assessment, not an independent verification.
    4. Transparency gap: The premium amount for the $112 million terrorism insurance policy remains undisclosed even after the leak, showing incomplete disclosure despite the reassurances offered.

    What does the incident reveal about the plant’s strategic significance going forward?

    1. Current capacity: Kudankulam has commissioned two 1,000 MWe VVER (a Russian-designed pressurised water reactor type) units, supplying up to two gigawatts, built in partnership with Russian firm Rosatom.
    2. Expansion underway: The government plans four more units at the site, which would triple installed capacity, expanding the facility’s strategic value and its digital attack surface.
    3. Gap between messaging and internal concern: The revelations have caused “absolute commotion” among plant officials internally, even as public statements downplay the breach’s significance.

    Conclusion

    The Kudankulam leak shows that reassurances confined to “core reactor safety systems” do not address the full risk profile of a strategic nuclear facility. This is because non-core operational data hosted through layered third-party vendors remains commercially and strategically sensitive. As Kudankulam’s capacity is set to triple, critical infrastructure protection frameworks need to extend cybersecurity accountability across the entire vendor supply chain, not the reactor core alone. Additionally this requires independent verification rather than self-reported vendor assessments.

    PYQ Relevance

    [UPSC 2023] What are the different elements of cybersecurity? Keeping in view the challenges in cybersecurity, examine India’s preparedness in preventing cyber attacks.

    Linkage: The article highlights cybersecurity challenges in protecting India’s critical infrastructure from ransomware and third-party data breaches. The Kudankulam data leak underscores the need to strengthen cyber resilience, vendor security, and protection of critical infrastructure despite no compromise of reactor systems.

  • [11th July 2026] The Hindu OpED: Terrorism’s data retreat hides emerging global threats

    PYQ Relevance[UPSC 2021] Analyse the complexity and intensity of terrorism, its causes, linkages and obnoxious nexus. Also, suggest measures required to be taken to eradicate the menace of terrorism.
    Linkage: The PYQ examines the evolving nature, drivers and counter-terrorism strategies against terrorism. The article builds on this by arguing that terrorism has transformed into decentralised, conflict-driven and digitally networked ecosystems, requiring a shift from reactive security measures to preventive state-building and institutional resilience.

    Mentor’s Comment

    The Global Terrorism Index (GTI) 2025 reported a significant decline in global terrorism, with 5,582 deaths across 2,944 attacks, reflecting a 28% fall in fatalities, a 22% decline in attacks, and improvements in the security landscape of 81 countries. However, the apparent statistical success has exposed a deeper strategic concern: terrorism is not disappearing but reorganising into decentralised, conflict-driven and digitally networked forms that conventional global indicators increasingly fail to capture.

    Why do declining global terrorism indicators present a misleading picture of security?

    1. Geographical concentration: Nearly 70% of global terrorism deaths are confined to five countries, Pakistan, Burkina Faso, Nigeria, Niger and the Democratic Republic of Congo.
    2. Organisational concentration: The threat is increasingly driven by a handful of organisations such as IS, JNIM, TTP, LeT and Al-Shabaab, indicating consolidation rather than disappearance of terrorism.
    3. Regional redistribution: Terrorism has retreated from many regions but intensified across fragile conflict theatres, particularly the Sahel, which now accounts for over half of global fatalities.
    4. Uneven security gains: Although 81 countries recorded improvement, the global decline largely reflects better security in stable regions rather than reduced terrorist capability.
    5. Misleading averages: Aggregate global indicators obscure localised escalation and encourage the mistaken belief that terrorism is steadily disappearing.

    Why is terrorism undergoing a structural transformation rather than a strategic decline?

    1. Decentralised networks: Terrorism has shifted from hierarchical organisations to autonomous cells and loosely connected affiliates.
    2. Digital radicalisation: Extremist recruitment, propaganda and operational coordination increasingly occur through online ecosystems instead of physical networks.
    3. Conflict dependence: Around 99% of terrorism-related deaths occur in countries already affected by armed conflict, making violence inseparable from state fragility.
    4. Border-centric operations: More than 60% of terrorist attacks occur within 100 km of international borders, reflecting growing dependence on poorly governed frontier regions.
    5. Adaptive resilience: Counter-terrorism operations fragment terrorist organisations but rarely eliminate their ideological and organisational capacity to regenerate.
    6. Operational normalisation: Terrorism is increasingly becoming a chronic feature of conflict zones rather than an exceptional global security crisis, reducing international attention despite persistent violence.
    7. Cross-border sanctuaries: Pakistan illustrates how safe havens continue to sustain transnational terrorism despite sustained counter-terrorism operations.

    What do contemporary terrorism hotspots reveal about the changing geography of terrorism?

    1. Burkina Faso: It has emerged as the world’s deadliest terrorism hotspot, illustrating the shift of global terrorism towards the Sahel.
    2. Pakistan: The resurgence of Tehrik-e-Taliban Pakistan (TTP) shows that terrorist organisations continue to expand despite declining global attack numbers.
    3. Nigeria: Boko Haram and ISWAP demonstrate how weak governance sustains long-term insurgencies.
    4. Niger: Political instability and military coups have weakened state capacity against extremist organisations.
    5. Democratic Republic of Congo: Armed conflict continues to fuel terrorist violence despite improvements elsewhere.
    6. Sahel Region: The region now accounts for over half of global terrorism deaths, making Africa the new epicentre of global terrorism.

    Why has the traditional counter-terrorism paradigm become inadequate?

    1. Military bias: Eliminating terrorists does not remove the governance failures that continuously generate extremism.
    2. Leadership decapitation: Killing leaders fragments organisations but produces smaller and harder-to-detect affiliates.
    3. National responses: Domestic strategies struggle against cross-border financial, ideological and logistical networks.
    4. Technology gap: Security agencies remain better prepared for physical organisations than encrypted digital radicalisation.
    5. Reactive approach: Counter-terrorism continues to respond to attacks instead of preventing the ecosystems that produce them.

    Why is statistical success producing strategic complacency?

    1. Misleading metrics: Falling attacks measure frequency but not organisational resilience.
    2. False optimism: Improving global rankings reduce political urgency for long-term institutional reforms.
    3. Invisible evolution: Smaller decentralised organisations generate fewer spectacular attacks but remain operationally resilient.
    4. Persistent conflict: Ongoing wars continue to replenish extremist ecosystems despite declining global averages.
    5. Strategic mismatch: Governments celebrate declining numbers while terrorist organisations continuously adapt their methods.

    What should next-generation counter-terrorism architecture prioritise?

    1. State capacity: Strengthen policing, justice delivery and local administration.
    2. Conflict prevention: Address armed conflict as the principal enabler of terrorism.
    3. Border governance: Improve surveillance, intelligence integration and frontier administration.
    4. Digital resilience: Disrupt online recruitment, financing and propaganda ecosystems.
    5. International cooperation: Expand intelligence sharing and coordinated action against transnational networks.

    Conclusion

    The central challenge confronting global security is not the persistence of terrorism but its transformation. Declining attacks and fatalities represent a quantitative improvement, whereas terrorism has reorganised into decentralised, conflict-driven and digitally networked ecosystems. Counter-terrorism success must therefore be measured not by annual attack counts but by the ability of states to build resilient institutions, prevent conflict and dismantle the conditions that allow violent extremism to regenerate.

  • India’s eastern border affected by flow of opium from Myanmar

    Why in the News?

    The Narcotics Control Bureau (NCB) released its 2026 annual report on 27 June 2026, tabled by Home Minister Amit Shah. The report documents Myanmar’s emergence as the primary global opium source following the Taliban’s 2022 ban on drug cultivation in Afghanistan. Infact, India’s northeastern border corridor is identified as the most direct and porous entry point for this expanding production base. 

    What change in the global narcotics supply chain has created new pressure on India’s northeastern borders?

    1. Taliban-imposed ban: The Taliban government’s 2022 ban on drug cultivation in Afghanistan eliminated the world’s largest opium producer from the supply chain, creating a vacuum in global opium supply.
    2. Myanmar’s replacement role: Myanmar filled this vacuum rapidly. The NCB’s 2026 annual report identifies Myanmar as the alternative global opium source, with consequences already visible along India’s eastern borders.
    3. Scale of cultivation expansion: Myanmar’s illicit opium cultivation expanded by approximately 56% between 2021 and 2023. The area under poppy cultivation reached 45,200 hectares.
    4. Golden Triangle transformation: Myanmar’s Golden Triangle has expanded beyond its traditional opiate role. Shan State now produces both opium and methamphetamine (Yaba), making it a major poly-drug hub.
    5. Manipur corridor as primary entry point: National Highway-102 through Manipur is the main land route for heroin and methamphetamine into India.
    6. Secondary corridor via Mizoram: Champhai in Mizoram provides the second major trafficking route via Myanmar’s Chin State. Drugs are routed through Assam’s Barak Valley via Aizawl and adjoining road networks.

    How have India’s northeastern states been transformed from transit zones into active narcotics staging grounds?

    1. Porous border mechanisms: The Free Movement Regime (FMR) along the India-Myanmar border and unfenced border stretches have converted the Northeast from a transit route into a distribution hub.
    2. States bearing frontline exposure: The NCB report specifically identifies that Manipur, Mizoram and Nagaland face the highest exposure due to increased drug production in Myanmar.
    3. Mizoram’s seizure data: Mizoram seized 1,477 kg of amphetamine-type stimulants (ATS) in 2025 out of the national total of 3,485 kg.
    4. Manipur’s seizure data: Manipur accounted for 535 kg in recoveries from other reported states. Delhi (454 kg), Gujarat (308 kg), and Karnataka (164 kg) reported significant quantities, demonstrating that narcotics originating from the northeast are penetrating deep into the hinterland.
    5. Distribution geography: Drugs move through the Barak Valley to Punjab, Gujarat and Maharashtra, making the Northeast a distribution node rather than a consumption centre.

    What does the drone-based trafficking data reveal about the operational maturity of trafficking networks?

    1. Five-fold increase from Pakistan border: Drone-based drug trafficking from across the Pakistan border into India has increased five-fold over the past five years, particularly in Punjab, demonstrating aerial circumvention of border controls.
    2. Incident trajectory (NCB data): Drone trafficking incidents surged from 3 in 2021 to 35 in 2022, 28 in 2023, 178 in 2024, and 305 in 2025, This is a 100-fold increase in incident count over five years.
    3. Seizure volume in 2025: In 2025, drone-related cases resulted in the seizure of 468 kg of narcotics, a 96% increase in quantity over 2024. Punjab recorded 298 cases and 461 kg seized.
    4. UAV sophistication: Trafficking networks are using unmanned aerial vehicles (UAVs) to circumvent traditional border controls, the NCB stated.
    5. Additional reporting states: Geographical spread: Rajasthan and Jammu & Kashmir also reported drone-related trafficking incidents.

    Where does the structural vulnerability in India’s border architecture lie and why cannot existing mechanisms address it?

    1. The FMR design conflict: The FMR facilitates movement of border communities. This objective conflicts with effective narcotics interdiction.
    2. Unfenced stretches: Drugs are smuggled through unfenced and porous stretches of the border.
    3. Geographic chokepoint: National Highway No. 102 through the Manipur corridor, the Champhai route in Mizoram carry both legal trade and illicit narcotics, making interception difficult.
    4. Ethnic armed group control: The poly-drug production in Myanmar is primarily concentrated in areas controlled by ethnic armed groups in Shan State. These groups operate outside the reach of both the Myanmar state and Indian border enforcement, making source-side interdiction impossible.
    5. South Asian arm of Afghan trade: The NCB specifically identifies that the South Asian arm of the Afghan drug trade flows through Pakistan into India via both the land frontier (Punjab, Rajasthan) and the maritime frontier (Gujarat, Maharashtra coastlines).

    Conclusion

    Myanmar’s rise as the world’s alternative opium supplier has created a structural narcotics challenge for India. The Northeast has become an active distribution hub rather than merely a transit corridor. Drone-enabled trafficking further weakens conventional border controls. Addressing the challenge requires technology-driven surveillance, calibrated reforms to the FMR and stronger cooperation with Myanmar.

    PYQ Relevance

    [UPSC 2018] India’s proximity to two of the world’s biggest illicit opium-growing states has enhanced its internal security concerns. Explain the linkages between drug trafficking and other illicit activities such as gunrunning, money laundering, and human trafficking. What countermeasures should be taken to prevent the same?

    Linkage: The PYQ examines the internal security implications of cross-border drug trafficking and its nexus with organised crime. The article explains how Myanmar-origin narcotics trafficking through India’s northeastern border has become a major cross-border security challenge.

  • Myanmar Replaces Afghanistan as Major Opium Source

    Why in News?

    The NCB Annual Report 2026 states that after the Taliban’s 2022 ban on opium cultivation in Afghanistan, Myanmar has become a major global opium source, increasing drug trafficking along India’s eastern borders.

    Key Highlights

    • Myanmar’s illicit opium cultivation increased by 56% (2021 to 2023), reaching 45,200 hectares.
    • The Manipur corridor (NH-102) is the primary route for heroin and methamphetamine entering India.
    • Champhai (Mizoram) is another major trafficking route via Myanmar’s Chin State.
    • The Golden Triangle (Myanmar, Laos, Thailand) has become a major hub for opium and methamphetamine (Yaba) production.

    Border Security Concerns

    • Porous India-Myanmar border and the Free Movement Regime (FMR) facilitate cross-border trafficking.
    • Northeastern states, especially Manipur, Mizoram and Nagaland, are increasingly used as transit and distribution hubs.

    Drone-Based Trafficking

    • Drone smuggling from Pakistan rose from 3 incidents (2021) to 305 incidents (2025).
    • In 2025, 468 kg of narcotics were seized through drones, with Punjab accounting for 298 cases.

    Other Trafficking Routes

    • Eastern Route: Myanmar → Manipur/Mizoram → Assam → Rest of India.
    • Western Route: Afghanistan → Pakistan → Punjab/Rajasthan.
    • Maritime Route: Pakistan → Gujarat/Maharashtra via fishing vessels.

    Government Response

    • Enhanced border surveillance and drone detection.
    • Intelligence-led operations by the Narcotics Control Bureau (NCB).
    • Increased international cooperation against cross-border narcotics trafficking.

    Prelims Facts

    • Golden Triangle: Myanmar, Laos, Thailand.
    • Golden Crescent: Afghanistan, Pakistan, Iran.
    • Yaba: Methamphetamine + caffeine tablets.
    • FMR: Allows border residents to cross the India-Myanmar border without a visa within prescribed limits.

  • How far are India’s internal security challenges linked with border management, particularly in view of the long porous borders with most countries of South Asia and Myanmar?

  • Money laundering poses a serious threat to country’s economic sovereignty. What is its significance for India and what steps are required to be taken to control this menace?

  • What are social networking site and what security implications do these sites present?

  • Cyber warfare is considered by some defense analysts to be a larger threat than even Al Qaeda or terrorism. What do you understand by Cyber warfare? Outline the cyber threats which India is vulnerable to and bring out the state of the country’s preparedness to deal with the same.

  • Article 244 of Indian Constitution relates to Administration of Scheduled areas and tribal areas. Analyze the impact of non-implementation of the provisions of Fifth Schedule on the growth of Left Wing Extremism

  • China and Pakistan have entered into an agreement for development of an economic corridor. What thread does it dispose for India’s security? Critically examine.