India Faces 15 Lakh Cyberattacks During Operation Sindoor

India faced nearly 15 lakh cyberattack attempts during Operation Sindoor, with around 150 of these attacks succeeding in compromising targeted systems. The attacks, which included distributed denial-of-service attacks, phishing campaigns, malware deployments, and website defacements, occurred during the military confrontation with Pakistan in May last year.

According to a report by Indian cybersecurity company Lisianthus Tech, the attacks underlined the risks facing India's critical infrastructure and government systems during periods of geopolitical tension. The report, titled 'Cyber Shikshit Bharat: Building a Cyber-Resilient India', cited data from the Indian Computer Emergency Response Team, which recorded more than 26.5 crore cyberattack attempts, 36.9 crore malware detections, and over 29.44 lakh cybersecurity incidents through 2025.

The report described Operation Sindoor as one of the clearest examples of how cyberattacks now accompany military and geopolitical events. Attackers deployed a mix of DDoS attacks, phishing campaigns, malware, and website disruptions alongside influence operations during the operation. Critical infrastructure, including the power sector, faced significant pressure, with nearly 2 lakh attempted cyber intrusions during the period.

Telecom networks, including BSNL, came under sustained attack, while the President's official website reportedly faced prolonged DDoS activity through the course of the operation. The report also named groups such as APT36 and SideCopy as having allegedly targeted defence, aerospace, and government organisations using remote access trojans.

The report's findings highlighted the increasing sophistication of cyberattacks, with Trojans and file infectors accounting for nearly 70 percent of all observed threats. Indian organisations faced between 1,000 and 2,000 cyberattacks every week through the year, with education, healthcare, manufacturing, and government emerging among the most targeted sectors.

Maharashtra, Gujarat, Delhi, and Tamil Nadu remained the major hotspots for such attacks, though the report flagged that smaller cities and towns are increasingly exposed to cyber risk as digitisation spreads beyond metro regions. The report also raised concerns about data protection compliance, highlighting the need for Indian organisations to strengthen their cybersecurity measures.

The report's findings have significant implications for India's cybersecurity landscape, highlighting the need for increased vigilance and cooperation between government agencies, private sector organisations, and individuals to prevent and respond to cyberattacks. As India's digital economy continues to grow, the risk of cyberattacks will only increase, making it essential for the country to develop a robust cybersecurity framework to protect its critical infrastructure and government systems.

In conclusion, the report's findings underscore the importance of cybersecurity in India's national security strategy. As the country faces increasingly sophisticated cyberattacks, it is essential for government agencies, private sector organisations, and individuals to work together to prevent and respond to these threats. By strengthening India's cybersecurity measures, the country can reduce the risk of cyberattacks and protect its critical infrastructure and government systems.

The report's release comes at a time when India is increasingly focusing on cybersecurity, with the government launching several initiatives to strengthen the country's cybersecurity framework. The report's findings are expected to inform policy decisions and guide the development of India's cybersecurity strategy, highlighting the need for a comprehensive and coordinated approach to cybersecurity.

Overall, the report's findings highlight the significant cyber threats facing India and the need for increased vigilance and cooperation to prevent and respond to these threats. As India continues to grow its digital economy, it is essential for the country to develop a robust cybersecurity framework to protect its critical infrastructure and government systems.