National Cyber Crime Investigation Agency’s Lahore circle has claimed to have dismantled a group allegedly involved in the illegal acquisition, possession, and commercial sale of sensitive telecommunications subscribers’ data. The operation was launched following a complaint submitted by PTA, which raised concerns regarding the unauthorized access and trade of confidential customer information. According to NCCIA, three suspects identified as Saghar, Ishfaq, and Malik Sadam were taken into custody during the operation conducted in Lahore. Authorities said the group had been unlawfully obtaining and selling protected telecommunications records that could pose serious privacy and security risks to individuals and organizations.
Investigators stated that the suspects were allegedly involved in accessing highly sensitive information, including Call Detail Records, SIM ownership information, subscriber registration details, family registration records, location data, and other confidential records protected under Pakistani law. Such information is considered highly sensitive because it can reveal personal identities, communication patterns, and geographic movements of individuals. The unauthorized acquisition and commercial distribution of this data raise concerns about privacy violations, identity theft, fraud, and other forms of cyber enabled crimes. The case also highlights the growing challenge faced by authorities in preventing the misuse of personal data and securing critical information held by telecommunications operators and government databases.
The operation was carried out under the directions of NCCIA Punjab Director Muhammad Ali Waseem. During the raid, investigators recovered a large quantity of digital equipment and storage devices allegedly used in the unlawful activities. The seized items included 14 mobile phones, one laptop, one tablet, 38 SIM cards, 10 internet devices, nine Biometric Verification System devices, seven fingerprint scanners, three Bluetooth fingerprint scanners, three card readers, 11 memory cards, nine USB storage devices, eight hard disks and RAM modules, and 60 hard copies containing fingerprint records. The recovery of biometric devices and fingerprint related material has further intensified concerns regarding the potential misuse of personal identity information and unauthorized access to sensitive databases.
The suspects have been booked under sections 3, 6, 13, 14, 16, and 17 of Prevention of Electronic Crimes Act 2016 as amended in 2025, read with sections 419, 420, 468, and 471 of Pakistan Penal Code. The charges relate to offenses involving unauthorized access to information systems, electronic fraud, forgery, and the use of fraudulent documents and digital records. Authorities continue to investigate the case to determine the full extent of the alleged operation, identify possible beneficiaries of the stolen information, and assess whether additional individuals or networks may have been involved in the illegal trade of telecommunications subscriber data. The incident also underscores the importance of stronger data protection measures and continued vigilance against cybercriminal activities targeting sensitive personal information in Pakistan.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
