Apple has plenty to be unhappy about right now, and most of it traces back to a single supplier in India. Confidential files covering the unreleased iPhone 18 Pro and iPhone 18 Pro Max have ended up on the dark web after Tata Electronics, one of the company’s manufacturing partners, was hit by a cyberattack. Reuters reports that Apple is “concerned” about the fallout, which is corporate shorthand for a relationship that has just taken a real knock.
The stolen material is not the usual vague supply-chain chatter. According to Reuters, at least six of the leaked files lay out hundreds of individual iPhone 18 Pro components, right down to the chips sitting on the main circuit board and the specifics of the battery and camera modules. Several documents carry “confidential” Apple watermarks and the internal codenames Apple uses for the two Pro models, alongside photos taken during drop testing. For a company that treats unreleased hardware like a state secret, that is about as bad as a leak gets.
The images themselves do not exactly blow the lid off the design. They show a slab-shaped grey handset with three rear cameras and an Apple logo, which lines up neatly with what the rumour mill has been saying for months. The iPhone 18 Pro is widely expected to look almost identical to the iPhone 17 Pro, with the most notable change being a slimmed down Dynamic Island rather than any dramatic redesign. So nobody is gasping at the form factor. The problem is everything sitting underneath it.
What makes this breach genuinely awkward is the level of detail tying suppliers to specific parts. Apple deliberately keeps that mapping private, partly to protect commercial terms and partly to stop rivals from working out how its phones are actually built. The leaked data exposes those connections directly. Earlier reporting suggested the haul went even wider, pulling in emails, event logs, documents linked to TSMC and Qualcomm, and information on older iPhone models too.
Tata’s position in all this is what raises the stakes. The firm supplies parts for the iPhone and assembles some units in India, and it has been one of Apple’s fastest growing partners as the company tries to move manufacturing away from its heavy reliance on China. A breach at exactly this supplier, at exactly the moment Apple is leaning on it, is uncomfortable timing.
The company disclosed the incident last week, confirming it had spotted a cybersecurity event after it became clear that ransom group World Leaks had dumped more than 200,000 files containing information on both Apple and Tesla. Those files have apparently been floating around the dark web since at least the 10th of June, meaning the data was out for weeks before the scale of it became public.
In response, Tata says it has locked down internal access to sensitive systems and brought in a global consultant to run a forensic audit. That is the right playbook, but Reuters notes the episode could still sour Apple’s view of the partnership. For now Apple is investigating alongside Tata and working on longer-term security measures, which is the polite version of making sure this does not happen again. Whether the relationship comes out of it intact is a different question entirely.
