On July 23–24, 2025, the Gujarat ATS arrested four individuals - hailing from Gujarat, Delhi-NCR, and Noida - suspected of being linked to Al‑Qaeda in the Indian Subcontinent (AQIS). Investigators uncovered that the group had shared documents and radical materials related to Operation Sindoor with two Pakistani social media accounts, implicating a direct line of communication with ISI-linked handlers.
Authorities revealed that the suspects had been using online platforms to promote extremist ideologies and potentially assist with terrorist planning, with a focus on coordinating via Pakistani channels. This included sharing sensitive operational insights tied to cross-border military operations.
Punjab Police separately arrested two other suspects, Sukhpreet Singh and Karanbir Singh, from Gurdaspur for leaking classified information about troop movements in Punjab, Himachal Pradesh, and Jammu & Kashmir to ISI. Forensic analysis confirmed their direct contact with ISI handlers; authorities also seized cash, multiple mobile phones, and live ammunition (.30 bore cartridges) from them.
In Haryana, another individual, Devendra Singh, was arrested for providing Pakistan’s ISI and army with updates on Operation Sindoor and related geopolitical tensions. Singh allegedly made contact after meeting Pakistani agents during a visit to Nankana Sahib in late 2024.
These developments underscore a sophisticated espionage network operating under ISI direction—coordinating real-time intelligence leakages during Operation Sindoor. Authorities have charged them under the Official Secrets Act and anti-terror laws. The investigation is ongoing.
