Breaches and incidents
Maharashtra Cyber (India): “Road of Sindoor” report counts 1.5 million attacks, 150 successful, after Pahalgam
Maharashtra Cyber said seven APT and hacktivist groups (APT36, Pakistan Cyber Force, Team Insane PK, Mysterious Bangladesh, Indo Hacks Sec, Cyber Group...
- Disclosed
- Verification
- Checked against a primary source
What happened
- Maharashtra Cyber said seven APT and hacktivist groups (APT36, Pakistan Cyber Force, Team Insane PK, Mysterious Bangladesh, Indo Hacks Sec, Cyber Group HOAX 1337, National Cyber Crew) launched over 1.5 million attacks on critical-infrastructure websites, with 150 successful, including defacement of the Kulgaon Badlapur Municipal Council and Defence Nursing College (Jalandhar) sites. ADGP Yashasvi Yadav said attacks came from Bangladesh, Pakistan, the Middle East and Indonesia (DT Next). CloudSEK’s own analysis (11 May) found DDoS on the PMO and President’s sites caused under about five minutes of disruption, a claimed 247 GB NIC leak was a 1.5 GB sample of public material, and Team Azrael’s Election Commission “1 million records” reused 2023 data.
- Technique: DDoS, defacement, malware, GPS spoofing, data-leak claims and misinformation.
- Attacker: as above; attribution is by Maharashtra Cyber.
- Response: officials denied claimed thefts from Mumbai’s CSMIA airport, hacks of aviation and municipal systems, and Election Commission website attacks; claims of grid blackouts and BrahMos facility attacks were classed as misinformation; over 5,000 misinformation items removed.