India — Cyber Threat Profile
India is phasing in the Digital Personal Data Protection (DPDP) Act, 2023, whose commencement notification and implementing DPDP Rules, 2025 were notified on 14 November 2025. Procedural provisions, including establishment of the Data Protection Board of India (DPB), took effect on 14 November 2025; the consent-manager framework becomes operative on 14 November 2026; and substantive Data Fiduciary obligations, data-principal rights — with a ninety-day outer limit for responding to requests — and the Board's powers to inquire into breaches, issue directions and impose penalties of up to ₹250 crore all commence on 14 May 2027. As of August 2026 the Board has no chairperson or members; MeitY invited applications in May 2026. Until May 2027 the IT Act's SPDI framework remains the operative data-protection regime, after which the DPDP Act also reaches processing outside India connected with offering goods or services to individuals in India. The FY 2026-27 Union Budget allocates ₹790 crore to MeitY's Cyber Security Projects scheme and ₹10 crore to the Board.- National CERT/CSIRT: CERT-In
- World Cybercrime Index 2024 (origin significance): 6.13 / 100, #10 worldwide
- Secure Internet servers per 1M people (2024): 1,212.4 (source: World Bank)
- Internet users (2025): 70.0% of population (source: World Bank)
Latest India coverage
- Jailbroken AI helped a hacker raid Indian universities 2026-10-21 · AI Security
- Pakistan's APT36 builds a USB tool to cross air gaps 2026-09-16 · Nation-State
- Ransomware claims against Indian firms tripled in a month 2026-08-12 · Cyber Incidents
- Fake tax penalty notices on WhatsApp are installing bank draining malware 2026-07-30 · Cyber Incidents
- Hackers rig South Asian University website to spread malware 2026-06-16 · Cyber Incidents
Threat actors targeting India
- APT41 APT
- Lazarus Group APT
- Mustang Panda APT
- Mysterious Team Bangladesh Hacktivist
- RedEcho APT
- SideCopy APT
- Transparent Tribe APT
- KillSec Ransomware · 50 incident(s)
- LockBit Ransomware · 32 incident(s)
- The Gentlemen Ransomware · 30 incident(s)
- FunkSec Ransomware · 23 incident(s)
- RansomHub Ransomware · 18 incident(s)
- Qilin Ransomware · 17 incident(s)
- Krybit Ransomware · 14 incident(s)
- NightSpire Ransomware · 13 incident(s)
- Cl0p Ransomware · 11 incident(s)
- DragonForce Ransomware · 9 incident(s)
- INC Ransom Ransomware · 8 incident(s)
- World Leaks Ransomware · 8 incident(s)
- Akira Ransomware · 6 incident(s)
- Vexy Ransomware Ransomware · 6 incident(s)
- BianLian Ransomware · 5 incident(s)
- Lynx Ransomware Ransomware · 5 incident(s)
- Medusa Ransomware Ransomware · 5 incident(s)
- Eclipse Ransomware · 4 incident(s)
- Fog Ransomware Ransomware · 4 incident(s)
- Global Secret Group Ransomware · 4 incident(s)
- Hunters International Ransomware · 4 incident(s)
- Orova Ransomware · 4 incident(s)
- RansomHouse Ransomware · 4 incident(s)
- 8Base Ransomware · 3 incident(s)
- BlackNevas Ransomware · 3 incident(s)
- Majinahanashi Ransomware · 3 incident(s)
- Morpheus Ransomware · 3 incident(s)
- Play Ransomware Ransomware · 3 incident(s)
- ShadowByt3$ Ransomware · 3 incident(s)
- Stormous Hacktivist · 3 incident(s)
- Doommageddon Ransomware · 2 incident(s)
- Everest Ransomware · 2 incident(s)
- FulcrumSec Ransomware · 2 incident(s)
Most targeted sectors
- Manufacturing 82 incident(s)
- Technology 71 incident(s)
- Healthcare 48 incident(s)
- Business & Professional Services 26 incident(s)
- Financial Services 21 incident(s)
- Education & Research 18 incident(s)
- Transportation & Logistics 13 incident(s)
- Government & Public Sector 10 incident(s)
- Hospitality & Tourism 10 incident(s)
- Retail & Consumer 10 incident(s)
- Agriculture & Food 9 incident(s)
- Energy & Utilities 4 incident(s)
Recent claimed incidents
- Rajasthan Police 2026-10-21 · Government & Defense
- WalkingTree Technologies 2026-10-19 · Technology
- Netcore Unbxd 2026-10-16 · Technology
- Enchanted Fine Jewellery 2026-10-15 · Retail & E-Commerce
- ocean beverages 2026-10-13 · Retail & E-Commerce
- Great Lakes 2026-10-13
- Durga Bearings 2026-10-13 · Manufacturing
- NCT Kandla (container terminal operations) 2026-10-12 · Transportation
- Libre Wireless Technologies 2026-10-12 · Technology
- Amantya Technologies 2026-10-12 · Technology
- BONJOUR GROUP 2026-10-10 · Other
- WONDR DIAMONDS & D GEM MOUNT 2026-10-10 · Retail & E-Commerce
- Majestic Holidays India Private Limited 2026-10-09 · Hospitality
- Manipal Academy of Higher Edu 2026-10-08 · Education
- IIT Roorkee 2026-10-08 · Education