Pakistan Telecommunication Authority (PTA) Chairman Hafeezur Naeem stated on Friday that all of Pakistan’s data is stored on foreign servers, making it vulnerable to theft. He made these startling revelations during a Senate Standing Committee on Information Technology meeting, where he confirmed that his personal SIM data has been available on the dark web since 2022.
Naeem informed the committee that the data of individuals who applied for Hajj had also been stolen and is now circulating on the dark web. He stressed the urgent need for a national data center to safeguard sensitive information. The Ministry of Interior and the National Cyber Crime Investigation Agency (NCCIA) are currently investigating the data breach’s source and method.
Senator Afnanullah, a committee member, highlighted the severity of the issue, claiming that data theft and its sale have become a multi-billion-rupee industry. He alleged that powerful interest groups are attempting to block the passage of the proposed Data Protection Bill.
Senator Palwasha Khan, the committee’s chairperson, questioned the future of a digital Pakistan given the current security situation. She shared that she was contacted from a private number and asked to pay a credit card bill, suggesting her personal data had also been compromised. She urged the government to pass the Data Protection Bill and expose those obstructing its implementation.
The PTA Chairman advised both lawmakers and the general public to avoid accepting mobile phones as gifts, warning that they may contain surveillance bugs capable of intercepting calls and accessing apps like WhatsApp.
Officials from the Ministry of IT confirmed that the Data Protection Bill has been drafted, and an alternative to WhatsApp is also being considered. They stated that consultations with stakeholders and security clearance procedures are currently underway.

