NIA Conducts Searches in Five States Over Cyber Attacks on Government Websites

The National Investigation Agency conducted searches at five locations across Maharashtra, Gujarat, Telangana, Bihar and Delhi on 25 August 2026 in a cyber-terrorism case linked to Distributed Denial of Service attacks on government websites.

The case originates from a complaint registered by the Gujarat Anti-Terrorism Squad on 25 June 2025. Investigators allege that the accused carried out sophisticated DDoS attacks against 54 websites belonging to Government of India entities during Operation Sindoor. The stated intent was to compromise national sovereignty, security and unity and to create public fear.

Two accused have already been arrested. During the latest searches agencies seized laptops, mobile phones, pen drives and other digital devices that contained material related to hacking activity. The locations included Junnar in Pune district, Nadiad in Kheda district, Ramagundam in Karimnagar district, Gopalganj and a site in Delhi.

Operation Sindoor itself remains a classified or low-profile security operation from the previous year. The cyber component is being treated as an attempt to disrupt critical computer infrastructure at a moment when the government was conducting other security measures.

Further investigation continues. The NIA has not released the names of the arrested individuals or the full list of targeted websites. The agency’s focus remains on mapping the technical infrastructure used for the attacks and any links to organised groups.

Cyber attacks on government digital services have become a recurring concern. The present case stands out because of the number of sites targeted and the timing relative to a named security operation. The outcome of the investigation will indicate whether the attacks were isolated or part of a broader network.