Pakistan’s entire digital data is being stored on foreign servers, leaving it highly vulnerable to theft and misuse. The shocking disclosure was made by the Chairman of the Pakistan Telecommunication Authority (PTA), Hafeezur Naeem, during a high-level parliamentary committee meeting.
He revealed that even his own SIM data has been available on the dark web since 2022. Additionally, data from individuals who submitted Hajj applications has also been stolen and circulated illegally online.
Call for a National Data Centre
The PTA chief stressed that the absence of a national data centre leaves the country exposed to repeated cyberattacks. A secure data storage system within Pakistan is essential to protect sensitive personal and institutional information. Current investigations led by the Ministry of Interior and the National Cyber Crime Investigation Agency (NCCIA) aim to trace the source and methods of recent data breaches.
Data Theft Becoming a Lucrative Industry
Senator Afnanullah highlighted that data theft has grown into a multi-billion-rupee illegal industry. He alleged that certain powerful groups are actively blocking the passage of the long-awaited Data Protection Bill, fearing exposure of their vested interests.
Senator Palwasha Khan also voiced deep concern, saying she personally experienced data misuse when she was contacted through a private number regarding her credit card details. She questioned the viability of a “Digital Pakistan” if citizens’ private information remains exposed. She urged the government to pass the Data Protection Bill without further delay.
Risks of Mobile Surveillance
The PTA chairman further warned that mobile phones gifted from unknown sources could contain surveillance bugs. Such compromised devices are capable of intercepting calls and even spying on widely used applications like WhatsApp. He advised parliamentarians and the general public to remain cautious and avoid accepting suspicious devices.
Government Moves Toward Data Security
Officials from the Ministry of IT confirmed that a comprehensive Data Protection Bill has already been drafted. The draft also includes proposals for an alternative to WhatsApp, ensuring better privacy and security for Pakistani users. Consultations with stakeholders are ongoing, while security clearance procedures are still under process.
The alarming disclosure that Pakistan’s data is entirely stored on foreign servers has renewed calls for urgent legislative action. Experts stress that without a national data centre and a strong Data Protection Bill, the dream of a secure and progressive digital Pakistan will remain out of reach.

