The National Investigation Agency (NIA) conducted raids at five locations across five states on Monday as part of an ongoing cyber terrorism investigation originally registered in Gujarat. The searches targeted premises in Pune (Maharashtra), Kheda (Gujarat), Karimnagar (Telangana), Gopalganj (Bihar), and Delhi.
The case stems from a June 2025 incident in which perpetrators launched a sophisticated Distributed Denial of Service (DDoS) attack against 54 official Government of India websites during “Operation Sindoor.” According to an NIA spokesperson, the targeted entities included critical information infrastructure, and the attack was intended to compromise national security, disrupt sovereignty, and induce public panic.
Two primary accused have already been arrested in the case, which was initially investigated by the Gujarat Anti-Terrorism Squad (ATS) before being taken over by the NIA.
Monday’s multi-state raids focused on individuals identified through technical analysis as having provided technical support, preparation, and skill upgrades to the main suspects. Federal agents executed court-issued search warrants, seizing digital evidence including three laptops, five mobile phones, and several pen drives containing incriminating data related to hacking activities. The suspects were interrogated on-site regarding their linkages to the primary network.
