A fascinating new report from cybersecurity firm SentinelOne has exposed a highly sophisticated, two-year cyber espionage campaign targeting Pakistani law enforcement. Running from February 2024 to April 2026, the digital operations focused heavily on the Balochistan Police networks.

Remarkably, the report reveals that both Indian and Chinese-linked networks were independently extracting data from the exact same systems—highlighting a fierce, uncoordinated convergence of strategic interests in Pakistan’s most volatile region.

For India, accessing these networks represents a critical defensive necessity. For Beijing, it betrays a deep, growing distrust of Islamabad’s ability to protect Chinese interests.

Inside the Breach: What the Data Holds

Police networks are a goldmine of internal security data. By monitoring the Balochistan Police networks, intelligence agencies gain a transparent window into Pakistan’s counter-insurgency operations, local intelligence, and structural stability. According to SentinelLabs, the breached systems contained:

• National Identity & Biometric Records: Fingerprints and interconnected citizen data.
• Internal Security Data: Criminal records, personnel files, and official citizen complaints.
• Logistical Tracking: Hotel and tenant registrations used to monitor movement in the province.

For India, gaining visibility into Balochistan’s police data is a matter of vital national security, given Islamabad’s routine geopolitical posturing. Pakistan has long attempted to deflect from its own internal governance failures by accusing India of sponsoring the Balochistan Liberation Army (BLA)—claims that New Delhi has consistently and firmly rejected. Securing firsthand, unvarnished data from Pakistani law enforcement allows India to effectively counter these narratives and monitor the ground reality of a fractured region.

Beijing’s Cyber Intrusion: A Vote of No Confidence in Islamabad

Perhaps the most telling revelation in the SentinelOne report is the motivation behind the China-linked operations. While Islamabad publicly champions Beijing as an “all-weather ally,” China’s aggressive cyber operations tell a completely different story.

Driven by panic over the safety of its citizens working on the China-Pakistan Economic Corridor (CPEC), Beijing chose to bypass Pakistani authorities entirely. Following devastating militant attacks—including a March 2024 suicide bombing and an October 2024 blast near Karachi airport—China deployed sophisticated malware disguised as a “portal update” into the Balochistan Police Complaint Management System.

The Takeaway: Rather than relying on Pakistan’s security guarantees, Beijing felt compelled to hack its own ally to independently evaluate threat levels. It is a stark, digital confirmation that China does not trust Pakistan to protect its multi-billion-dollar investments.

The Cyber Reality of the Subcontinent

The parallel operations underscore the relentless, grey-zone warfare defining modern South Asian geopolitics. While Pakistan and India have historically engaged in reciprocal cyber campaigns targeting strategic, academic, and critical infrastructure, this latest overlap in Balochistan highlights a shifting dynamic.

As China penetrates Pakistani networks out of sheer frustration with Islamabad’s security failures, India’s parallel presence ensures that New Delhi maintains a sharp, preemptive eye on the evolving threats along its borders. In the digital age, statecraft is measured in data—and India is ensuring it stays ahead of the curve.