NADRA Suspends 8 Officers Following Data Breach

In a decisive move, the National Database and Registration Authority (NADRA) has taken action against several of its officers following a severe breach of data security.

Reports from various national dailies in Pakistan have revealed that eight officers have been suspended and charged, with more potentially facing penalties.

Among those facing disciplinary action are high-ranking officials including Usman Cheema, Usman Javed, and Ahmarin Mir, signaling a serious response from NADRA to address the breach.

Confirmation and Privacy Concerns:

A spokesperson from NADRA has confirmed the disciplinary measures, indicating that they were based on recommendations from a joint investigation team.

However, due to privacy concerns and ongoing legal proceedings, the specific names of the officers facing action have not been disclosed.

Data Breach and Investigation:

The breach of data security came to light when it was reported that personal information of approximately 2.7 million Pakistanis had been stolen from NADRA’s database.

This revelation was later confirmed by the Joint Investigation Team (JIT). The team’s report, submitted to the Ministry of Interior, detailed that the data theft occurred between 2019 and 2023.

nvestigations revealed breaches at NADRA offices in Multan, Karachi, and Peshawar, with stolen data being transferred across locations before ultimately reaching Dubai.

Government Response and Review:

In response to these findings, the government formed the JIT to address the cybersecurity incident that occurred in March 2023.

Presently, the Ministry of Interior is diligently reviewing the JIT report and contemplating further action against senior NADRA officials whose negligence may have contributed to the data breach.

The swift and decisive action taken by NADRA underscores the seriousness with which the breach of data security is being addressed.

As investigations continue and accountability measures are enforced, the authority remains committed to safeguarding the privacy and security of Pakistani citizens’ personal information.