NCCIA arrests three in Lahore over illegal sale of citizens’ sensitive telecom data

The National Cyber Crime Investigation Agency (NCCIA) Lahore has dismantled an organised network allegedly involved in the illegal trade of citizens’ confidential

The National Cyber Crime Investigation Agency (NCCIA) Lahore has dismantled an organised network allegedly involved in the illegal trade of citizens’ confidential telecommunication and personal data, arresting three suspects during a targeted operation.

According to officials, the network was engaged in unlawfully obtaining and selling highly sensitive information, including call data records (CDRs), SIM ownership details, family registration information, location data and other confidential telecom records. Authorities warned that such activities pose a significant threat to citizens’ privacy, digital security and national security.

The operation was launched on the special directives of Director Operations Punjab, Muhammad Ali Waseem, following a complaint submitted by the Pakistan Telecommunication Authority (PTA) Lahore. Based on the complaint, the NCCIA registered Case No. 146/2026 and initiated a detailed investigation into the suspected data trafficking network.

As a result of the investigation, law enforcement officials arrested three accused, identified as Muhammad Saghar, Muhammad Ashfaq and Malik Saddam. Investigators believe the suspects were operating as part of a well-organised network that illegally accessed confidential records and sold the information to various clients for financial gain.

Preliminary findings suggest that the group had access to a wide range of sensitive information, including citizens’ call histories, SIM registration and ownership records, family registration details and real-time location data. Officials said the information was allegedly marketed to different individuals without legal authorisation, raising concerns about potential misuse for criminal activities such as fraud, identity theft, blackmail and cybercrime.

During the raid, the NCCIA recovered a large quantity of digital devices and equipment believed to have been used in the illegal operation. The seized items included 14 mobile phones, one laptop, one tablet, 38 SIM cards, 10 internet devices, nine biometric verification system (BVS) devices, seven fingerprint scanners, three Bluetooth fingerprint scanners, three card readers, 11 memory cards, nine USB storage devices, eight hard drives and RAM modules, along with hard copies containing 60 fingerprint impressions.

Officials stated that the recovered equipment has been taken into custody for forensic examination to determine the full scope of the network’s activities and identify any additional individuals involved in the operation.

Director Operations Punjab Muhammad Ali Waseem reaffirmed the agency’s commitment to combating cybercrime and protecting citizens’ personal information. He said the NCCIA would continue taking strict and indiscriminate action against individuals and groups involved in the illegal acquisition and sale of sensitive data.

He stressed that organised cybercrime networks dealing in confidential personal information would not be allowed to operate with impunity and that all those found involved would be prosecuted in accordance with the law.