A collaborative investigative effort has uncovered a grave breach of privacy: sensitive personal information belonging to around 2.7 million Pakistani individuals has been illicitly accessed from the National Database and Registration Authority (NADRA) database over a four-year period.
The comprehensive report, crafted by a joint investigation team (JIT) tasked with unraveling the alleged database breach, sheds light on the magnitude of the scandal. It reveals that the breach occurred between 2019 and 2023, marking a significant security lapse within NADRA’s systems. Upon completing their inquiry, the JIT promptly submitted their findings to the Ministry of Interior in Islamabad for further action.
Officials within the Ministry of Interior are presently immersed in a thorough review of the report’s contents, aiming to grasp the full extent of the situation. The investigation has pinpointed NADRA offices in Multan, Karachi, and Peshawar as the primary locations where the data theft transpired. Consequently, the JIT has recommended disciplinary measures against senior NADRA officials implicated in negligence, which facilitated the breach.
The report elucidates a concerning chain of events, suggesting that the stolen data was initially transferred from Multan to Peshawar before being diverted to Dubai. Subsequently, it is alleged that the pilfered information was traded in international markets, reaching as far as countries like Argentina and Romania, underscoring the global ramifications of the breach.
Heading the JIT was Syed Waqaruddin, an official from the Federal Investigation Agency (FIA), who spearheaded the collaborative effort alongside representatives from various sensitive agencies and NADRA appointees. Their collective diligence and expertise culminated in the comprehensive probe report, which serves as a crucial document in addressing the breach and mitigating its repercussions.

