PTA Denies SIM Data Breach After Reports of Massive Leak

The Pakistan Telecommunication Authority (PTA) has rejected claims of a mobile SIM data leak, saying its audit found no breaches in the country’s licensed telecom sector.

The statement came after media reports suggested that sensitive information of SIM holders—including Interior Minister Naqvi—was being sold online. According to those reports, mobile location details were allegedly priced at Rs500, call and data records at Rs2,000, and foreign travel information at Rs5,000.

In response, the PTA clarified that it does not hold or manage subscriber data, which remains with licensed telecom operators. “Initial review shows the reported datasets include family details, travel records, vehicle registrations, and CNIC copies, indicating aggregation from multiple external sources, not telecom operators,” the authority said.

The PTA also revealed that it has blocked over 1,300 websites, apps, and social media pages found to be involved in selling or sharing personal data.

Concerns over data security have been rising in Pakistan. Just months ago, the National Cyber Emergency Response Team of Pakistan (PKCERT) warned that login credentials of more than 180 million internet users were compromised in a global data breach. That incident reportedly involved an unencrypted file containing 184 million unique account credentials.

Adding to the alarm, a joint investigation team had earlier informed the interior ministry that the personal data of at least 2.7 million citizens was compromised between 2019 and 2023 due to a leak from the National Database and Registration Authority (NADRA).

The Ministry of Interior has already set up an inquiry committee to investigate the latest reports of SIM data being sold online.