The National Cyber Crime Investigation Agency (NCCIA) has conducted an operation in Lahore in which two suspects were taken into custody over an alleged case involving the acquisition and sale of citizens’ data. According to NCCIA, the operation resulted in the recovery of nearly three terabytes of sensitive and personal data from the possession of the suspects. The agency stated that the individuals were allegedly operating a website known as “Mini Nadra” and had access to data linked to millions of citizens.
According to the details shared by NCCIA, the suspects allegedly had access to information belonging to more than 10 million citizens and were involved in the alleged acquisition, possession, and sale of personal data. The agency recovered two mobile phones from the suspects, identified as Arsalan and Ali Raza, along with devices containing a large volume of data. The operation was carried out on the instructions of NCCIA Punjab Director Hussam Bin Iqbal as part of efforts to address activities involving unauthorized access and handling of sensitive information.
The recovered information included SIM ownership and registration details, call detail records (CDRs), SIM databases, users’ location information, family trees, and sensitive details associated with different government institutions. NCCIA stated that the suspects had access to a platform known as “Khoji” and had allegedly established a website called “Mini Nadra,” through which Nadra-related information was reportedly provided. The agency said the investigation is focused on examining the sources of the data, the extent of access, and other details related to the case.
A case has been registered against both suspects, and further investigation is underway, according to NCCIA. The incident highlights the importance of strengthening data protection practices and maintaining security measures around sensitive citizen information. With increasing reliance on digital systems, cybersecurity agencies continue to monitor activities involving personal data to help protect information belonging to individuals and institutions. The investigation will determine further details regarding the alleged data access and distribution activities associated with the case.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.