NIA searches five states over DDoS attacks on government sites during Operation Sindoor

The National Investigation Agency conducted searches at five locations across Maharashtra, Gujarat, Telangana, Bihar and Delhi on August 25, 2026, in a cyber terrorism case linked to attempted Distributed Denial of Service attacks during Operation Sindoor.

The locations were Junnar in Pune, Nadiad in Kheda, Ramagundam in Karimnagar, Gopalganj and Delhi. The case was registered on June 25, 2025, by the Gujarat Anti-Terrorism Squad and later taken over by the NIA.

According to the agency, the accused attempted sophisticated DDoS attacks against 54 websites of Government of India entities. The attacks targeted critical computer resources and Critical Information Infrastructure with the intent to compromise national sovereignty, security and unity and to incite public fear.

Two accused have already been arrested. During the latest searches, laptops, mobile phones, pen drives and other digital devices containing material related to hacking activities were seized. Suspects who allegedly provided support and assistance in preparing for the attacks were questioned.

A DDoS attack floods a server or network with illegitimate traffic from compromised sources to disrupt normal operations. The NIA said technical analysis identified the additional suspects whose premises were searched after warrants were obtained from a competent court.

Further investigation continues. The agency described the actions as part of efforts to address cyber threats timed with sensitive national security operations.