The Joint Investigation Team (JIT), tasked with examining a data breach at the National Database and Registration Authority (Nadra), has informed the Interior Ministry that the personal details of around 2.7 million citizens were compromised between 2019 and 2023. The JIT, led by a senior Federal Investigation Agency (FIA) officer and including representatives from various intelligence agencies, completed its investigation and submitted a report recommending action against officials allegedly involved in the leak. The probe revealed Nadra offices in Karachi, Multan, and Peshawar as potential sources of the breach, with evidence suggesting data surfacing in Argentina and Romania. Nadra has taken steps to enhance service delivery and database security, with actions initiated following a cyber security incident in March 2023. The JIT advised technological upgrades and disciplinary or legal actions against responsible parties. Concerns about Nadra’s data security were previously raised, especially after revelations of leaks involving senior military officials. In response, measures to address weaknesses in Nadra’s security framework were emphasized, particularly regarding biometric records.
