A Pakistan Muslim League-Nawaz (PML-N) senator has warned that sensitive personal data of Pakistani citizens, including records from NADRA, the Federal Board of Revenue (FBR), and banks, is allegedly being sold on the dark web for as little as Rs. 500 per person.
The issue was raised during a meeting of the Senate Standing Committee on Interior and Narcotics Control, chaired by Senator Faisal Saleem Rehman. The committee expressed grave concern over the exposure and misuse of citizens’ data and directed relevant authorities to take immediate steps to strengthen data protection.
PML-N Senator Afnan Ullah Khan told the committee that data belonging to millions of citizens had been compromised, estimating the total value of the leaked information at Rs. 70 to 80 billion. He stressed that such large-scale theft could not occur without internal involvement. “Data of 240 million people cannot be stolen without collusion from within institutions,” he said.
Minister of State for Interior Senator Talal Chaudhry informed the committee that passport security features had been upgraded. The Directorate General of Immigration and Passports reported that 99 employees involved in irregularities had been dismissed, while action against senior officers was also underway on the instructions of the Interior Secretary.
NADRA officials stated that no major data breaches had occurred since enhanced security measures were introduced in 2023. However, the committee urged NADRA to further improve cybersecurity systems and monitoring mechanisms.
The meeting also discussed the blocking of certain CNICs. The committee directed NADRA to facilitate verification and clearance of CNICs through district-level committees under existing policy.
Additionally, rising incidents of WhatsApp hacking were reviewed. The National Cyber Crime Investigation Agency briefed the committee on steps being taken to address the issue, including the allocation of additional resources.
The committee also approved amendments to the Prevention of Electronic Crime Bill, 2025, aimed at strengthening cybercrime laws.
Concluding the session, Senator Faisal Saleem Rehman emphasized the need to protect sensitive data, particularly of law enforcement agencies, warning that any lapse in data security would have serious consequences.
