The National Investigation Agency (NIA) has intensified its probe into a cyber terrorism case linked to attempted attacks on Indian government websites during Operation Sindoor, conducting searches at five locations across five states.
NIA teams carried out searches in Junnar in Maharashtra’s Pune district, Nadiad in Gujarat’s Kheda district, Ramagundam in Telangana’s Karimnagar district, Gopalganj in Bihar, and Delhi. The operation forms part of the investigation into case RC-01/2025/NIA/AMD, which was registered on June 25, 2025, and initially investigated by the Gujarat Anti-Terrorism Squad before being transferred to the NIA.
The investigation centres on alleged Distributed Denial-of-Service (DDoS) attacks aimed at disrupting 54 Indian government websites during Operation Sindoor. Investigators are examining the suspected cyber network and its activities to establish the wider conspiracy and identify other individuals who may have been involved.
During the latest searches, the agency seized digital devices, including laptops, mobile phones and other electronic material, along with documents that could provide further evidence in the case. The seized material is expected to undergo forensic examination as investigators trace digital communications, online activities and possible links between the suspects.
The case highlights the growing importance of protecting government digital infrastructure from coordinated cyber threats. Attempts to disrupt multiple government websites during a period of heightened security concerns have added a significant cyber dimension to the broader security challenges surrounding Operation Sindoor.
The NIA’s investigation is continuing, with officials examining the seized evidence to uncover the full extent of the alleged cyber-terror network and determine whether additional individuals or entities were involved.