Lok Sabha Question No. 4482 (UNSTARRED), answered on 2025-08-20
Subject: Cybersecurity Incidents
Ministry: ELECTRONICS AND INFORMATION TECHNOLOGY
Asked by: Shri Rahul Gandhi

## GOVERNMENT OF INDIA

## MINISTRY OF ELECTRONICS AND INFORMATION TECHNOLOGY

## LOK SABHA UNSTARRED QUESTION NO. 4482

TO BE ANSWERED ON: 20 .08.2025

## CYBERSECURITY INCIDENTS

## 4482.   SHRI RAHUL GANDHI:

Will the Minister of ELECTRONICS AND INFORMATION TECHNOLOGY be pleased to state:

- (a) the number of cybersecurity incidents reported annually during the last five years;
- (b) the number of cyber-attacks traced to foreign sources including those attributed to foreign state actors and those originating from within India with State-wise distribution where applicable;
- (c) the details of major cyber incidents involving the breach of personal data of more than ten lakh users including the date of each incident and the number of individuals affected and the nature of information leaked;
- (d) the number of prosecutions initiated and convictions secured in cybercrime cases linked to both domestic and foreign sources; and
- (e)  the  key  measures  undertaken  and  budget  allocated  during  the  last  five  years  to  strengthen India's cybersecurity infrastructure and response capabilities?

## ANSWER

## MINISTER OF STATE FOR ELECTRONICS AND INFORMATION TECHNOLOGY (SHRI JITIN PRASADA)

- (a)  to  (e):  The  Indian  Computer  Emergency  Response  Team  (CERT-In)  is  designated  as  the national agency for responding to cyber security incidents under the provisions of section 70B of the Information Technology Act, 2000.

As per the information reported to CERT-In, the total number of cyber security incidents observed during the last five years are given below:

|   Year | Number of cyber security incidents   |
|--------|--------------------------------------|
|   2020 | 11,58,208                            |
|   2021 | 14,02,809                            |
|   2022 | 13,91,457                            |
|   2023 | 15,92,917                            |
|   2024 | 20,41,360                            |

According  to  the  logs  analysed  and  made  available  to  CERT-In,  the  Internet  Protocol  (IP) addresses of the computers from where the attacks appear to have originated belong to several countries. It may also be noted that many times attackers use techniques to falsify the location and identity.

The  National  Crime  Records  Bureau  (NCRB)  under  the  Ministry  of  Home  Affairs  (MHA) compiles and  publishes  the statistical data on crimes. The  latest  published report is for the year

2022. As per NCRB, cases registered under cybercrime head including number of convictions during the period from 2018 to 2022 are as follows:

|   Year | Total Cyber Crimes Cases registered   | Cases Charge Sheeted   | Cases in which Trials Completed   | Cases Convicted   |
|--------|---------------------------------------|------------------------|-----------------------------------|-------------------|
|   2018 | 27,248                                | 7,234                  | 1,044                             | 495               |
|   2019 | 44,735                                | 9,187                  | 1,051                             | 367               |
|   2020 | 50,035                                | 14,176                 | 1,626                             | 1,110             |
|   2021 | 52,974                                | 18,744                 | 1,155                             | 491               |
|   2022 | 65,893                                | 18,925                 | 2,402                             | 1,118             |

The Government has undertaken various initiatives to strengthen India's cybersecurity infrastructure and cyber security incident response capabilities, which inter alia, include:

- National  Cyber  Security  Coordinator  (NCSC)  under  the  National  Security  Council Secretariat (NSCS) to ensure coordination amongst different agencies.
- National  Cyber  Coordination  Centre  (NCCC),  implemented  by  CERT-In,  examines  the cyberspace  to  detect  cyber  security  threats.  It  shares  the  information  with  concerned organizations, state governments and stakeholder agencies for taking action.
- Cyber Swachhta Kendra (CSK) is a citizen-centric service provided by CERT-In, which extends the vision of Swachh Bharat to the Cyber Space. Cyber Swachhta Kendra is the Botnet Cleaning and Malware Analysis Centre and helps to detect malicious programs and provides free tools to remove the same. It also provides cyber security tips and best practices for citizens and organisations.
- Ministry of Home Affairs (MHA) has established Indian Cybercrime Coordination Centre (I4C) to deal with cybercrimes in a coordinated and effective manner.
- The  Government  has  established  National  Critical  Information  Infrastructure  Protection Centre (NCIIPC) for protection of critical information infrastructure in the country under the provisions of section 70A of the IT Act, 2000.
- CERT-In operates an  automated  cyber  threat  intelligence  exchange  platform  for  sharing tailored alerts with organisations across sectors for proactive threat mitigation.
- Cyber security mock drills are conducted regularly to enable assessment of cyber security posture and preparedness of organisations in Government and critical sectors.
- The  budget  allocated  for  strengthening  cyber  security  infrastructure  by  Ministry  of Electronics and Information Technology (MeitY) during the last five years is as follows:

| Year    | Budget       |
|---------|--------------|
| 2020-21 | Rs. 293 Cr.  |
| 2021-22 | Rs. 411 Cr.  |
| 2022-23 | Rs. 462 Cr.  |
| 2023-24 | Rs. 580 Cr.  |
| 2024-25 | Rs. 1004 Cr. |

******