iPhone 18 Pro supplier list and parts exposed in Tata data leak

The most tightly held document in consumer electronics is the bill of materials, and a chunk of Apple’s appears to be sitting on the dark web. Files posted by the ransomware group World Leaks contain component lists, supplier names, and photographs tied to the unreleased iPhone 18 Pro, stolen from Tata Electronics, Apple’s manufacturing partner in India. They lay bare the one thing Apple works hardest to keep out of public view: who makes what, and how much of it.

According to reporting on the leaked cache, at least six files map iPhone 18 Pro components to specific suppliers, covering chips on the main logic board along with parts of the battery and camera.

Between them, the documents detail hundreds of parts destined for the next Pro line. For a company that treats its component sourcing as a competitive weapon, the disclosure is closer to a strategic problem than a privacy one.

Tucked inside the iPhone 18 Pro folder were photographs of handsets undergoing drop tests at a Tata plant, dated early 2026. They show a conventional slab-shaped grey phone with a three-camera rear array and the Apple logo, which is to say nothing that contradicts a year of accumulated rumour. The renders matter less than the spreadsheets around them.

The 💜 of EU tech

The latest rumblings from the EU tech scene, a story from our wise ol' founder Boris, and some questionable AI art. It's free, every week, in your inbox. Sign up now!

What the supplier maps reveal is the architecture of leverage. They show where Apple draws a single part from several vendors, preserving the bargaining power that comes from playing them off one another, and where it leans on just one or two, which is precisely where the supply chain is brittle.

Competitors, counterfeiters, and Apple’s own suppliers can all read that document the same way Apple does, which is the problem.

The breach also touches a relationship Apple has spent years building. India has become central to its plan to diversify production away from China, and Tata Electronics is one of the pillars of that strategy, assembling iPhones and supplying components from plants in Tamil Nadu and Karnataka.

A leak of unreleased product data from inside that operation is an uncomfortable advertisement at exactly the moment Apple is asking the world to trust its Indian supply base.

This is not Tata’s first appearance in this story. A ransomware group earlier claimed to have taken hundreds of gigabytes from the company, including files it said related to Apple and Tesla trade secrets, a haul Tata acknowledged as a breach while the contents went unverified. The latest disclosure gives that earlier claim sharper edges, with named parts and dated photographs rather than a vague inventory.

World Leaks operates on the now-familiar model of stealing data and publishing it when a target declines to pay, rather than encrypting systems and demanding a ransom to unlock them. Apple is no stranger to the genre. It spent years fending off leaks of unreleased iPhone designs, though those tended to be renders and casings rather than the underlying supplier ledger.

The exposure also lands while Apple is moving faster on the security front generally, pushing software updates earlier than its usual cadence in response to AI-accelerated hacking tools. A leak of supply-chain data is a different threat from a software vulnerability, but it points at the same widening attack surface, much of it sitting in partners Apple does not directly control.

Apple is investigating and working with Tata on longer-term measures, according to people familiar with the response. Neither company has detailed how the files were taken or how far they spread before they surfaced. What is already public is the part that cannot be recalled: the map of who supplies the next iPhone, drawn in Apple’s own hand, now in everyone else’s.