cracking Down Eight NADRA Officials Suspended as Action Begins in Data Theft Case

By Asif Ali Awan

| Published Mar 28, 2024 | 09:32 a.m.

Following recommendations from the Joint Investigation Team (JIT), eight officials from the National Database and Registration Authority (NADRA) have been suspended as disciplinary action commences in the data theft case.

While over a dozen NADRA officers are under scrutiny, eight have been officially suspended and are currently undergoing charge-sheeting procedures. However, the identities of these individuals remain undisclosed due to ongoing court proceedings and concerns regardi

ng data privacy.

Earlier, the JIT submitted a comprehensive report to the interior ministry, shedding light on the leakage of citizens' data by NADRA. The investigation revealed that between 2019 and 2023, data belonging to approximately 27 million Pakistanis was compromised, with NADRA offices in Multan, Peshawar, and Karachi implicated in the breach.

According to the JIT findings, the stolen data traveled from Multan to Peshawar and eventually to Dubai, with subsequent reports of its sale in countries such as Argentina and Romania.

The report further recommended punitive action against several senior NADRA officers involved in the incident. Headed by the Director of Cybercrime at the Federal Investigation Agency (FIA), the JIT was tasked with investigating the cyberattack that occurred in March 2023, resulting in the unauthorized access and theft of personal information belonging to citizens, including military personnel.

Upon the completion of the inquiry, the JIT submitted its findings to the then-caretaker Prime Minister, Anwaarul Haq Kakar, who directed NADRA to implement necessary actions based on the recommendations.

The proposed measures outlined in the report aim to enhance the security of citizens' data through regulatory actions and technological upgrades. Compliance measures have already been initiated in response to directives from the Prime Minister, with a focus on bolstering emergency service delivery and ensuring robust database security standards.