The National Cyber Crime Investigation Agency (NCCIA) has uncovered an alleged organised network involved in obtaining, selling and distributing sensitive personal information of Pakistani citizens through online platforms and social media.
According to an NCCIA briefing submitted to the Senate Standing Committee on Information Technology, the data allegedly traded by the network included call detail records, travel histories, NADRA-linked information, family trees, SIM ownership records, subscriber details, geolocation information and location-tracking data.
Suspects Allegedly Used Fake Accounts
The NCCIA said its investigation found that the suspects allegedly worked together to acquire and transmit confidential information.
A technical examination of mobile phones seized during the investigation reportedly provided evidence of the accused persons’ involvement. The briefing said fake WhatsApp accounts and microfinance bank accounts were allegedly used to receive payments and hide the proceeds.
The case highlights concerns over the unauthorised circulation of personal data through digital platforms, particularly where information linked to telecommunications, identity records and movement can be obtained and sold.
Five People Named in Case
The NCCIA registered a case against five suspects, identified as Arshad Tariq, Arham Baree, Anam Sabir, Muhammad Rizwan and Samman Sabir.
Four suspects were arrested and later remained on bail, while Arham Baree secured pre-arrest bail, according to the agency’s briefing.
Investigators also recovered seven mobile phones of different brands during the course of the investigation.
NCCIA Investigates Possible Foreign Links
The investigation is continuing as the NCCIA works to establish whether other individuals were involved in the alleged data-selling network and whether the operation had any foreign connections.
The agency also raised concerns about Pakistan’s wider cyber threat-monitoring capabilities, saying the country does not currently have a consolidated national threat-intelligence dashboard offering real-time visibility into cyber threats targeting critical information infrastructure.
According to the NCCIA, the absence of such a system can make it harder for authorities to identify emerging threats at an early stage and coordinate an effective response.
The agency’s findings underline the need for stronger mechanisms to protect citizens’ personal information and improve the detection of organised cybercrime involving sensitive data.
