Several Pakistani law enforcement agencies were targeted in separate cyber-espionage campaigns by hacking groups linked to China and India, according to a new report released by cybersecurity firm SentinelOne. The campaigns reportedly took place between February 2024 and April 2026 and focused on collecting intelligence related to Pakistan’s internal security and regional affairs.
The report states that agencies including the Balochistan Police, Khyber Pakhtunkhwa Police, Islamabad Police and the Punjab Safe Cities Authority were among the organisations targeted. These institutions manage sensitive information related to militant activities, border security, law enforcement operations and Pakistan’s cooperation with international partners.
According to SentinelOne researchers, the cyber campaigns appeared to have different strategic objectives. The activity linked to Chinese groups was believed to be focused on protecting Chinese interests and personnel involved in projects in Pakistan, while the campaigns attributed to India-linked groups were seen as part of broader regional intelligence-gathering efforts amid continuing geopolitical tensions.
The researchers said attackers attempted to exploit vulnerabilities in government networks and applications, including complaint management systems used by police departments. Some Pakistani officials downplayed the impact of the attacks, while the Khyber Pakhtunkhwa Police acknowledged that cyber activity had increased during periods of heightened tensions between India and Pakistan.
China’s Embassy denied any involvement in cyberattacks, stating that Beijing firmly opposes all forms of cybercrime. India’s Embassy did not immediately respond to requests for comment on the report. As with many cyber operations, publicly attributing responsibility remains challenging, and cybersecurity experts caution that technical assessments should be interpreted carefully.
The findings highlight the growing importance of cybersecurity in South Asia, where cyber-espionage has become an increasingly significant component of regional security and geopolitical competition. Experts say governments across the region are investing more heavily in cyber defence capabilities to protect critical infrastructure and sensitive government networks from evolving digital threats.
