2026 India MoD/DRDO — Zulfiqar APT Group dark-web dump claim; DRDO projects, 5k+ personnel (unverified)
Data compromised
Actor-claimed: DRDO sensitive project data, 5,000+ military personnel records, Ministry of Defence logs, DRDO controlled-information files, HAL and BHEL system data — unverified; field mix and total corpus size not independently validated
Technical writeup
Unverified leak-site / dark-web dump claim — observed July 11, 2026. Open-source and defence-focused accounts including The STRATCOM Bureau (@OSPSF) reported that a Pakistani hacking syndicate calling itself "Zulfiqar APT Group" advertised a massive dump of Indian strategic and military-sensitive data on the dark web, alleging DRDO project material, more than 5,000 military personnel files, Ministry of Defence logs, DRDO controlled-information archives, and HAL/BHEL system data. No matching public confirmation from India's Ministry of Defence, DRDO, HAL, or BHEL appeared at indexing time; prior March 2025 Babuk Locker 2.0 DRDO marketing involved a separate actor and partial sample release. BreachHistory indexes the actor-cited 5,000+ personnel figure as unverified and treats broader terabyte-scale marketing as unconfirmed.
Root cause
Unverified dark-web leak claim by actor branding as Pakistani syndicate "Zulfiqar APT Group"; Indian government had not confirmed at catalog time