Massive Data Breach Exposes iPhone 18 Pro Secrets
This is far more than another pre-release rumor. A trove of sensitive files, including photos, component lists, and internal schematics for Apple's upcoming iPhone 18 Pro, has been dumped onto the dark web. The breach represents a devastating supply-chain attack against the tech giant.
The ransomware group World Leaks has claimed responsibility for the attack, which targeted Indian manufacturing partner Tata Electronics. On its dark web site, the group published what it claims are over 200,000 files, totaling more than 630 gigabytes of data.
Among the leaked files are photographs and video clips of iPhone 18 Pro units undergoing drop tests, according to Reuters. The images, some of which were shared on X by industry leaker EvLeaks, show a device with a three-camera layout and the iconic Apple logo.
Technical Blueprints Revealed
The real damage, however, lies in the technical and logistical details now in the hands of competitors. The archive is filled with documentation bearing Apple's confidential branding and internal codenames for the iPhone 18 Pro program.
At least six files detail the hundreds of individual components inside the unreleased phone, along with a complete list of their suppliers. A separate AppleInsider report notes the dump also contains purported board layouts for both the iPhone 18 Pro and iPhone 18 Pro Max, as well as datasheets for the rumored A20 Pro chip.
Apple "Concerned" as Investigation Underway
Apple confirmed it is investigating the breach, telling Reuters it is "concerned about the documents being shared on the dark web." While the company has yet to issue a detailed public statement, sources confirm a full analysis is underway.
In response, Tata Electronics has tightened access to its internal systems and hired a global cybersecurity firm for a forensic investigation. The Indian manufacturer, responsible for roughly a third of Apple’s iPhone production in the country, is now working directly with Apple to implement additional security measures.
World Leaks had previously taken credit for a cyberattack on Nike and reportedly issued a ransom demand to Tata. The company has declined to comment on the alleged ransom.