NIA Searches Five States in Probe of DDoS Attacks on 54 Government Websites During Operation Sindoor

The National Investigation Agency conducted searches at five locations across five states on 24 August 2026 as part of its investigation into a cyber terrorism case involving attempted Distributed Denial-of-Service attacks on 54 Government of India websites.

The locations were Junnar in Pune district of Maharashtra, Nadiad in Kheda district of Gujarat, Ramagundam in Karimnagar district of Telangana, Gopalganj in Bihar, and Delhi.

The case, registered as RC-01/2025/NIA/AMD on 25 June 2025, was originally filed by the Gujarat Anti-Terrorist Squad. It concerns sophisticated DDoS attacks that targeted critical computer resources and Critical Information Infrastructure during the period of Operation Sindoor.

According to the NIA, the attacks were carried out with the intent to compromise national sovereignty, security and unity and to incite public fear. Two accused have already been arrested.

During investigation, technical analysis identified suspects who allegedly provided support and assistance to the arrested accused in preparing for and upgrading skills to carry out the DDoS attacks. Search warrants were issued by a competent court before the premises of these suspects were searched.

Officers seized three laptops, five mobile phones, pen drives and other digital devices containing material related to hacking activities. The suspects were examined about their association with the arrested accused.

Operation Sindoor was the Indian military response to the April 2025 Pahalgam terror attack. Indian forces conducted precision strikes on terrorist hideouts in Pakistan and Pakistan-occupied Kashmir beginning on 7 May 2025.

Further investigation in the case continues. The NIA has expanded its cyber counter-terrorism work in recent years, including capacity-building programmes for state police forces and monitoring of encrypted platforms and anonymising tools used in such operations.