Reporting snapshot · 23 May 2026. This report reflects the NCCIA press conference and reporting published on 23 May 2026 and does not include later developments.
What happened
The National Cyber Crime Investigation Agency (NCCIA) said it had dismantled a gang allegedly selling sensitive personal data of government officers to foreign entities, arresting four people in Punjab.
NCCIA Director General Syed Khurram Ali told a press conference on Friday that the group had obtained and sold call records, computerised national identity cards (CNICs) and passports of key officials. The suspects were identified as Arshad Tariq, Arham Bari, Anam Sabir and Mohammad Rizwan. Ali said forensic examinations had been carried out on their mobile phones.
The director general said the suspects were sharing the data with foreign intelligence agencies and described the case as “organised espionage and cybercrime”. Cases have been registered over the illegal transfer of data outside Pakistan, and the agency is examining institutional staff emails to determine how the information was accessed.
The NCCIA has directed government institutions to strengthen data security and ensure that information is not accessed by unauthorised individuals. “Responsibility for safeguarding sensitive data rests with those granted access,” Ali said, adding that investigations were continuing to identify officials who facilitated the breach.
Ali said the agency had also identified gangs involved in leaking the personal identity and banking data of ordinary citizens. A joint committee of the NCCIA and the State Bank of Pakistan is working on the issue, and action is being taken against officials found selling data.
Separately, Ali said the agency had arrested a person running an online campaign for Swat to become part of Afghanistan, and warned that action would be taken against those who speak against the state. Pakistan’s journalists, he said, were the “eyes and ears of society”.
Why it matters
The case points to concerns about insider access to sensitive state records and the movement of such data across borders. Call records, identity documents and passport details are among the most closely held information the state maintains on its officers.
The announcement also signals a broadening of the NCCIA’s work beyond financial fraud to cases it classifies as espionage. The agency said it currently has 480 personnel across the country and that capacity-building efforts are under way.
What remains uncertain
The NCCIA did not publicly identify which foreign agencies were allegedly involved, nor did it say how much data was transferred or how long the activity continued. The four suspects have not been convicted, and no information about their legal representation or the specific charges filed against them was released. The outcome of the review of institutional staff emails is also unknown.
Sources & reporting notes
This is a summary of published reporting, not independent reporting. Sources reviewed on 2026-05-23.
- Dawn — "Gang selling govt officers' data abroad busted"23 May 2026 · Reports the NCCIA briefing, the four arrests, the data involved and the agency's instructions to institutions.
