Technology and Power

Two Countries, Two Copies, and a Question of Who the Cavalry Rides For

Apple's stolen iPhone secrets got a forensic audit. Anime streamers got seven arrests and two governments. The physics under both is identical.

Manish Singh/July 5, 2026/5 min read

630 gigabytes of Apple's iPhone 18 Pro secrets sat on a dark web leak site in June, posted by a group that had stopped bothering to encrypt anything. World Leaks does not lock your files and demand a key for them. It steals the data and threatens to publish, and this time it published: more than 200,000 files, supplier lists mapping iPhone 18 Pro components to the firms that make them, parts detail on the battery and camera setup, and photographs of a grey slab prototype going through drop tests at a Tata plant. Reuters reviewed the documents. Tata Electronics confirmed a cybersecurity incident. Apple acknowledged it about a week later.

The framing in the post I bookmarked is that Apple moved to India to reduce its dependence on China and it backfired. That reading is tidy and wrong. Apple did diversify after 2020, and Indian facilities assembled roughly 55 million iPhones in 2025, about a quarter of global output. Tata went from making components in 2023 to full assembly in barely two years. Geographic diversification did cut the China concentration risk. What it did not do was remove risk. It changed the shape of it. More of Apple's sensitive manufacturing data now sits with one fast-scaled partner, and that partner has now been hit repeatedly by the same criminal lineage. World Leaks is a rebrand of Hunters International, which leaked 1.4TB from Tata Technologies in March 2025. This is the same conglomerate breached again, not a verdict on India.

A few things need saying plainly before anyone runs too far with it. TechCrunch, which reviewed a sample, notes the authenticity and completeness of the leaked data have not been fully independently verified, so treat the corporate documents as reported rather than proven down to the last file. There is no indication consumer payment data was taken. A viral drop-test video circulating alongside the leak drew a caution from Forbes about possible fakes, so the Reuters-verified documents and photos are the solid part, not every clip. The reply-guy claim that Reuters is paid propaganda against India is nonsense; the reporting is corroborated by TechCrunch, CNBC, Al Jazeera, BleepingComputer, and Tata's own statement. And the recurring line about a 38 billion dollar fine on Apple is misleading. That is a potential maximum in a separate Indian antitrust case Apple is actively challenging, not a levied penalty, and it has nothing to do with the breach.

The physics that undoes Apple here is the same physics that built HiAnime. A copy costs nothing to make and cannot be recalled once it is loose. That is why the second story belongs next to the first.

Seven people were arrested in Vietnam over HiAnime, the world's largest anime piracy site. Vietnam's Ministry of Public Security ran it through C03, the economic crimes department, and A05, the cyber unit, opening a case for copyright infringement and money laundering. Thanh Nien named the ringleaders as Nguyen Dinh Minh Khoa, Nguyen Trung Anh, Nguyen Dinh Xuan, and Nguyen Hoang Thanh. The group is accused of running more than 100 websites and posting more than 26,000 films (the Vietnamese reports say bo phim, films broadly, not strictly anime episodes), earning around 12.85 million dollars, roughly 308 billion dong, in advertising that authorities say was laundered through property and cars. Four of the seven are in custody, and three are barred from leaving their residences while the investigation continues.

Police booking grid of seven men, three on the top row and four on the bottom
The seven suspects charged in Vietnam over HiAnime, released by the Ministry of Public Security. Four are detained; three are under residence restriction.

Look at the machinery that produced those photographs. The Alliance for Creativity and Entertainment, the anti-piracy coalition backed by the Motion Picture Association, fed intelligence to Vietnamese police and confirmed the arrests on July 2, 2026. US Homeland Security Investigations and the Department of Justice were credited for support. The lever underneath all of it was trade. The US Trade Representative named Vietnam a Priority Foreign Country in its 2026 Special 301 Report, the first use of that category in thirteen years, over IP enforcement failures. Vietnam then ran a nationwide enforcement campaign from May 7 to 30, 2026, and HiAnime, which had already been flagged in the US notorious markets report, went dark on March 13 before its operators were rounded up months later.

Set the two responses side by side and the asymmetry is hard to unsee. Streaming copies of anime summoned a multi-year, cross-border operation involving two governments, an MPA-funded coalition, US federal agencies, and the full weight of American trade policy pressed against Hanoi. The theft of Apple's actual manufacturing secrets by a foreign criminal group got a forensic audit, a CERT-In inquiry, and a corporate press line. I am not arguing Apple's data deserved to be stolen or that HiAnime was a public service. I am noticing whose loss calls down the cavalry of two states and whose loss gets a consultant. The copies that studios in Los Angeles want controlled get the USTR, Special 301, HSI, and the DOJ. That ordering of priorities is a choice, and it is worth naming as one.

Whether any of it sticks is a separate question, and the precedent is not encouraging for the rightsholders. When Vietnam convicted the Fmovies operators, they received suspended sentences and repaid about 15,900 dollars, a figure the USTR itself noted did little to deter anyone. HiAnime survived years of pressure by rebranding, Zoro to Aniwatch to HiAnime, and a clone domain was reportedly live within a day of the shutdown. Chasing domains rarely ends an operation; arresting the operators is the escalation, but the demand does not disappear with them. At its peak HiAnime out-trafficked Disney's own properties in a given month.

The copy is the thing that neither Apple nor the anime studios can put back once it is out. What differs is whose loss moves two governments and whose gets absorbed quietly as a cost of doing business. The file with Apple's supplier map is still out there somewhere, indifferent to every audit, and the appetite for anime that beat Disney did not evaporate when the site said goodbye. The harder problem, how you protect anything at all once it can be copied for free, keeps drawing the least attention, while the easier and far more photogenic one ends with seven men lined up against a wall for the camera.