The National Cyber Crime Investigation Agency (NCCIA) has revealed that 139 online platforms were allegedly involved in the illegal trade of sensitive data belonging to Pakistani citizens. Sources confirmed that the discovery came after an extensive investigation targeting websites, mobile applications, and social media channels suspected of breaching data security. The findings have highlighted the scale of the issue, showing how widely personal information was being circulated and monetized across multiple digital spaces. Authorities stated that the exposed platforms have now been blocked on the directives of Pakistan Telecommunication Authority (PTA), marking a critical first step in curbing the circulation of such data.
According to the investigation team, the platforms involved in the unauthorized sale included 18 mobile applications and 17 websites specifically designed to facilitate these transactions. In addition, two YouTube channels were found to be promoting or participating in the activity. Social media accounted for the majority of the exposure, with 75 Facebook accounts, 10 Instagram accounts, 12 Telegram accounts, and 10 TikTok accounts discovered to be engaged in data trading. Investigators further uncovered that one WhatsApp group was actively distributing sensitive information of Pakistani citizens, illustrating how both mainstream and encrypted platforms are being misused for this purpose.
Officials have confirmed that PTA has blocked access to all the identified platforms following recommendations from the investigation team. However, authorities clarified that this is only the initial stage of the crackdown. The next phase of the operation will focus on registering formal cases against individuals behind these platforms and ensuring accountability. Once apprehended, suspects will face interrogation to determine how such sensitive data was obtained, the networks involved in its distribution, and whether further data breaches remain undetected. The objective is to dismantle the channels at their source and prevent a recurrence of such incidents in the future.
This large-scale exposure of data malpractice has raised pressing concerns about cybersecurity and data protection in Pakistan. Experts note that such widespread exploitation of personal information underscores the urgent need for stronger regulatory frameworks and stricter enforcement to safeguard citizens. With increasing digital adoption across banking, e-commerce, and communication, the misuse of personal information can have far-reaching implications for both individuals and institutions. The findings by NCCIA have placed a renewed spotlight on the country’s cybersecurity preparedness, raising expectations that the state will adopt more robust mechanisms to prevent similar breaches going forward. The investigation reflects an ongoing effort to protect citizens from cyber risks while reinforcing the importance of digital trust in Pakistan’s expanding online ecosystem.
Follow the SPIN IDG WhatsApp Channel for updates across the Smart Pakistan Insights Network covering all of Pakistan’s technology ecosystem.
