UPSC Prelims Practice Questions — Kudankulam nuclear plant data leak sparks ‘absolute commotion’

Q1. According to reports on the 2026 Kudankulam Nuclear Power Plant data breach, the following are stated to have been among the compromised/leaked material accessed by the ransomware group 'World Leaks'. Which of the above is/are NOT correct?

  1. Blueprints of the ventilation systems of Units 3 and 4
  2. Blueprints of the cooling systems of Units 3 and 4
  3. A common control room floor layout
  4. The Russian-supplied reactor core systems
  • A. 1 and 2
  • B. 3 only
  • C. 4 only
  • D. 2 and 4

Q2. In the context of the 2026 Kudankulam Nuclear Power Plant data breach, 'World Leaks' refers to which one of the following?

  • A. A ransomware/data-extortion group that published the compromised files on the dark web
  • B. The third-party data-centre provider on whose server the files were stored
  • C. A cyber-audit programme run by CERT-In for protected systems
  • D. An internal whistle-blower disclosure portal maintained by NPCIL

Q3. Approximately how many files linked to the Kudankulam Nuclear Power Plant were reported to have been posted by the ransomware group 'World Leaks'?

  • A. about 6,000
  • B. about 19,000
  • C. about 8,58,000
  • D. about 49,621

Q4. Which one of the following agencies, functioning as India's national nodal agency for computer security incident response, is reported to be investigating the Kudankulam data breach?

  • A. National Critical Information Infrastructure Protection Centre (NCIIPC)
  • B. Indian Computer Emergency Response Team (CERT-In)
  • C. Atomic Energy Regulatory Board (AERB)
  • D. Nuclear Power Corporation of India Limited (NPCIL)

Q5. CERT-In, the agency examining the Kudankulam breach, is designated as the national nodal agency for cyber security incident response under which one of the following provisions?

  • A. Section 70A of the Information Technology Act, 2000
  • B. Section 70B of the Information Technology Act, 2000
  • C. Section 66 of the Information Technology Act, 2000
  • D. Section 43A of the Information Technology Act, 2000

Q6. With reference to the governance architecture of the Kudankulam Nuclear Power Plant, consider the following. Which of the above is/are correctly identified?

  1. Nuclear Power Corporation of India Limited (NPCIL) is the implementing agency
  2. The Atomic Energy Regulatory Board (AERB) is the regulator
  3. The reactors are of the pressurised heavy water reactor (PHWR) design
  4. The Russian partner is Rosatom / Atomstroyexport
  • A. 1 and 2
  • B. 1, 2 and 4
  • C. 3 and 4
  • D. 1, 2, 3 and 4

Q7. With reference to how the 2026 Kudankulam breach relates to the plant's systems, consider the following statements. Which of the statements given above is/are correct?

  1. The breach originated on NPCIL's own protected reactor network rather than on a third-party contractor's server.
  2. The leaked engineering drawings pertained to Units 3 and 4, which are under construction, rather than to the already-commissioned Units 1 and 2.
  3. Unlike the Russian-supplied reactor core systems, the compromised data related to conventional balance-of-plant/common service facilities.
  • A. 1 only
  • B. 1 and 2 only
  • C. 2 and 3 only
  • D. 1, 2 and 3

Q8. Which one of the following is, on completion of its ongoing units, set to be India's largest nuclear power station by installed capacity?

  • A. Tarapur Atomic Power Station
  • B. Rawatbhata Atomic Power Station
  • C. Kudankulam Nuclear Power Plant
  • D. Kakrapar Atomic Power Station