The dark web posting exposed hundreds of component-to-supplier mappings for an unreleased iPhone model, threatening Apple's carefully protected supply chain
David Paul Morris / Bloomberg via Getty Images
Documents reviewed by Reuters identified no fewer than six files naming the vendors behind individual iPhone 18 Pro parts — among them processors on the main logic board, battery components, and camera hardware. A person familiar with the matter said that Apple views such granular vendor information as highly sensitive — information the company keeps out of its public supplier database — and is especially alarmed given that the iPhone 18 Pro has not yet launched.
The documents shed light on Apple's sourcing concentration across its component base — whether a part comes from a broad pool of vendors or a narrow one — giving outside observers a window into the company's supply-chain leverage and risk exposure.
Among the leaked materials were images, stamped to early 2026, capturing what appeared to be durability testing at a Tata plant. The phones pictured were flat, grey devices sporting three cameras on the back and an Apple logo on the front. Reuters reported that a source identified the handsets as iPhone 18 Pro units, though the outlet was unable to independently verify the model designation from the photos themselves. Watermarks reading "confidential" and internal Apple project designations matching the iPhone 18 Pro lineup appeared across multiple files, the source said.
The ransomware group responsible, World Leaks, previously claimed credit for a breach at Nike $NKE. Reuters said it was unable to authenticate the leaked files or obtain a response from World Leaks. Spokespeople for Apple and Tata did not respond to Reuters queries.
The breach is part of a larger leak of more than 200,000 files from Tata Electronics that Reuters has previously reported on. That earlier disclosure included component design documents for older iPhone models, as well as files related to Tesla $TSLA, Taiwan Semiconductor Manufacturing Co., and Qualcomm $QCOM — all Tata clients or partners. In response to the breach, Tata has locked down employee access to certain internal systems and brought in an outside global consultancy to carry out a forensic review, while Apple and Tata continue to work together on remediation.
Tata assembles iPhones and supplies components, making it one of Apple's most important manufacturing partners outside China. Counterpoint, a research firm, estimates that India will account for roughly a quarter of global iPhone production this year — a steep climb from just 6% in 2022.
Apple is expected to release the iPhone 18 Pro and Pro Max in September.
Join 500,000+ readers who start their day with Quartz.
By subscribing, you agree to our Terms of Service and Privacy Policy.
