Advanced Weapons and Equipment India Limited (AWEIL), a major Indian public sector defense company, has allegedly suffered a significant data breach. A threat actor has posted on a dark web forum claiming to be selling sensitive documents belonging to the company. AWEIL is a critical entity within India’s defense infrastructure, responsible for manufacturing and supplying small arms, artillery, and other armaments to the Indian Armed Forces, foreign militaries, and for domestic civilian use. The company operates under the administrative control of the Department of Defence Production, Ministry of Defence, Government of India.
The alleged breach could expose highly confidential information with serious national security implications. According to the forum post, the data for sale could be used by “enemies and competitors of India.” The threat actor has listed several types of information allegedly contained within the leaked documents, suggesting a deep compromise of the company’s internal files. The potential leak of such data could jeopardize ongoing military projects, compromise weapon capabilities, and create diplomatic tensions.
The data allegedly for sale includes:
- Critical weapon technical specifications, including range, caliber, and night firing capabilities.
- Details on secret R&D projects like the 155mm Mounted Gun System and Anti-Material Rifle.
- Arms export contracts to the Middle East and Europe, reportedly worth ₹581 crore.
- A list of importing countries that could potentially be used to create diplomatic pressure.