The National Investigation Agency (NIA) has conducted searches at five locations across Maharashtra, Gujarat, Telangana, Bihar and Delhi as part of an ongoing investigation into an alleged cyber terrorism case linked to attacks on Indian government websites during Operation Sindoor.
54 Government Websites Targeted
According to the NIA, the accused allegedly attempted sophisticated Distributed Denial of Service (DDoS) attacks against 54 websites belonging to Government of India entities.
The targeted systems reportedly included critical computer resources and Critical Information Infrastructure (CII). The agency said the alleged attacks were intended to compromise national sovereignty, security and unity and create fear among the public.
Searches Conducted at Five Locations
NIA teams carried out searches at:
➤ Junnar, Pune district – Maharashtra
➤ Nadiad, Kheda district – Gujarat
➤ Ramagundam, Karimnagar district – Telangana
➤ Gopalganj – Bihar
➤ Delhi
The case was originally registered by the Gujarat Anti Terrorism Squad on June 25, 2025, before the investigation was taken over by the NIA.
Two Accused Already Arrested
- The NIA said two accused have already been arrested in the case.
- During the investigation, technical analysis allegedly helped identify additional suspects who are believed to have provided support and assistance in preparing for the alleged DDoS attacks and improving the technical skills required to carry them out.
Digital Evidence Seized
During the searches, investigators seized digital devices and documents allegedly containing material related to hacking activities.
The seizures included:
➤ 3 laptops
➤ 5 mobile phones
➤ Pen drives
➤ Other digital devices
➤ Documents
The suspects were also questioned about their alleged association with the people already arrested in the case.
Telangana Connection
- One of the search locations was Ramagundam in Karimnagar district, Telangana.
- The Telangana connection makes the operation particularly significant for the state. However, being subjected to a search does not by itself establish a person’s guilt. The investigation is continuing.
What Is a DDoS Attack?
- A Distributed Denial of Service attack attempts to disrupt an online service by flooding a server or network with a large volume of illegitimate internet traffic.
- When government websites or critical infrastructure are targeted, such attacks can potentially disrupt important digital services and raise serious national security concerns.
Investigation Continues
- The NIA is examining the seized electronic devices and documents to establish the full extent of the alleged cyber network and determine whether additional individuals were involved.
- Further legal action may follow depending on the findings of the investigation.
Business Galaxy Takeaway
➤ NIA searched five locations across five states.
➤ 54 Government of India websites were allegedly targeted.
➤ The alleged attacks took place during Operation Sindoor.
➤ Critical computer resources and CII were reportedly targeted.
➤ Two accused have already been arrested.
➤ Three laptops, five phones and other digital evidence were seized.
➤ One search location was in Ramagundam, Telangana.
➤ The investigation is ongoing.
Important: These are allegations under investigation. Guilt has not been established by a court.
