Files uploaded to the dark web by a ransomware group that gained access to data at Tata Electronics include detailed lists of components, the companies that supply them and photographs of unreleased iPhone 18 Pro models, according to documents and a person familiar with the matter. The material lays out hundreds of parts tied to the next-generation devices and shows supplier-to-part mappings that Apple normally keeps private.
The exposure threatens the tightly controlled ecosystem Apple relies on to assemble iPhones from a global network of suppliers. The leaked records identify which firms make chips placed on the main circuit board as well as suppliers of camera modules and battery components. For Apple, that level of granularity is treated as sensitive information because it reveals where the company sources particular parts and where its supplier base is concentrated.
Tata Electronics performs both parts supply and contract assembly for iPhones and has become one of Apple’s largest manufacturing partners outside China. The company’s growing role in Apple’s production footprint is an element of India’s broader effort to expand electronics manufacturing. Those commercial and strategic ties add a layer of risk as the leak exposes elements of how Apple and Tata divide work across the supply chain.
Company spokespeople did not respond to queries about the data exposure. The authenticity of the leaked files has not been independently verified and the group that posted the material could not be reached for comment. The group that claimed responsibility for the breach has previously said it was behind other intrusions.
What the files contain
Documents reviewed in the leaked archive include at least six files that map many components of the iPhone 18 Pro models to named suppliers. The material covers a range of parts, from integrated circuits on the main board to elements of camera assemblies and portions of the battery. Some files carry internal code names and carry watermarks labeled "confidential," consistent with the internal labeling Apple uses for unreleased device generations, according to the person familiar with the matter.
The records also reveal where Apple sources a given component from multiple vendors and where it relies on a smaller set of suppliers. That visibility lays bare both bargaining leverage in negotiations and potential supply vulnerabilities where concentration is high.
Within the same folder of files are photographs taken at one of Tata’s plants showing phones undergoing drop tests. The images are dated early 2026 and display a slab-shaped, grey handset with a three-lens rear camera array and an Apple logo. The documents do not provide a definitive model number for the device shown in the images, and the person familiar with the files described them as photos of iPhone 18 Pro models.
Scope and earlier material
Earlier material linked to the same breach included a much larger trove of files allegedly taken from Tata Electronics, with reports indicating the repository contained more than 200,000 files. Those earlier records reportedly included component design papers related to older iPhone models as well as files tied to other Tata clients and to suppliers used in smartphone manufacturing.
In response to the incident, Tata has restricted internal access to sensitive systems while it investigates the breach. The company also engaged a global consultant to perform a forensic audit of the intrusion and its impacts.
Commercial timing and context
The leak arrives as Apple is preparing to refresh its flagship phones - industry reporting indicates the company is on track to release iPhone 18 Pro and Pro Max models in September. The exposure also coincides with a period of price adjustments across Apple’s product lines: the company recently increased prices for iPads and MacBooks, citing higher costs for memory and storage chips, and analysts have expressed expectations that iPhone pricing could rise in coming months.
Because the leaked documents name suppliers tied to unreleased hardware, the breach poses potential competitive, counterfeiting and vendor-management risks. Competitors and counterfeiters could use supplier mappings to identify manufacturing capabilities, while other vendors might obtain insight into Apple’s sourcing balance and negotiate from that vantage.
Implications for partnerships and manufacturing strategy
For Apple and Tata, the incident strikes at the trust underpinning their commercial relationship. Apple’s move to expand assembly outside China has relied on partners such as Tata to scale production rapidly. India’s share of global iPhone assembly has grown markedly in recent years, and the leaked files underscore how a concentrated set of relationships can create information-security and contract-management risks.
At present, the record shows hundreds of parts mapped to the upcoming iPhone generation, but it does not provide a complete public accounting of every supplier Apple uses. Apple’s public supplier disclosures do not list the level of part-to-supplier detail contained in the leaked files.
Ongoing uncertainty
The provenance and completeness of the leaked archive remain uncertain while investigators work to verify the documents and determine the full scope of what was taken. Tata’s internal controls have been tightened as forensic work proceeds, and both commercial and legal follow-up are underway.