PTA Concludes Probe into Citizens’ Data Leak

ISLAMABAD: The Pakistan Telecommunication Authority (PTA) has completed its investigation into recent reports of citizens’ data being leaked online.

PTA sources told ProPakistani that the data circulating on the internet is old and does not appear to have been leaked directly from telecom companies. The probe found no evidence suggesting that telecom operators’ systems were the source of the breach.

The findings stated that citizens’ call detail records (CDRs), travel history, and family tree information were not stored together in any single database. Data such as travel history, family details, and vehicle registration were not available with telecom operators, which suggests the leaked records were compiled from multiple sources before being uploaded, possibly on the dark web.

The investigation further revealed that in 2022, PTA shared certain datasets with the Punjab Information Technology Board (PITB) and the Benazir Income Support Programme (BISP). PTA sources claimed that some of the data shared with these organizations could have been leaked onto the internet. The regulator had also conducted a similar inquiry in 2022, with third-party forensic analysis confirming at the time that the compromised data was old.

Read more: PTA cautions public over growing online scams

During the latest probe, PTA cross-checked around 1,500 mobile SIM records, which showed inconsistencies. In many cases, the mobile number, CNIC, and address belonged to different individuals, raising questions about the accuracy of the leaked data. PTA sources said the matter of CDR-related information becoming public had been raised multiple times, underscoring the need for stronger mechanisms to safeguard citizens’ personal information.

The investigative report will be forwarded to the Ministry of Interior for further action. The National Cyber Crimes Investigation Agency has also been tasked with probing the matter on directives from the Interior Minister. PTA sources stressed that investigations should identify the exact source of the leak and emphasized the need for a more secure national framework to protect citizens’ data.