India has seen a dramatic rise in cyberattacks targeting its government entities, with a 138% increase in incidents from 2019 to 2023. The number of reported cyberattacks surged from 85,797 in 2019 to 204,844 in 2023, signaling a sharp escalation of cyber threats against critical government infrastructure. The trend has raised alarms over the vulnerability of India’s digital infrastructure and prompted a comprehensive review of the country’s cybersecurity efforts. The surge highlights the need for proactive measures to protect sensitive government data and prevent potential disruptions to national security.
The Ministry of Electronics and Information Technology, in collaboration with the Indian Computer Emergency Response Team (CERT-In), has been monitoring and responding to the growing number of cybersecurity incidents. Although the incidents briefly dropped to 54,314 in 2020, the numbers quickly rebounded with significant increases in subsequent years. In 2021, the incidents rose to 48,285, followed by a sharp increase in 2022, reaching 192,439. The number of incidents continued to rise in 2023, with 204,844 reported cases. This trend underscores the urgent need for improved cybersecurity measures across government departments.
In response to the rising number of cyberattacks, the Indian government has implemented several initiatives to strengthen its cybersecurity posture. One of the most notable measures is the requirement for the appointment of Chief Information Security Officers (CISOs) within all central ministries, departments, and state and union territories. This ensures a dedicated focus on cybersecurity and better coordination at all levels of government. Additionally, the National Critical Information Infrastructure Protection Centre (NCIIPC) has been tasked with safeguarding the country’s critical infrastructure from cyberattacks and cyber-terrorism, offering essential services like threat intelligence and advisories.
Despite these efforts, India continues to face persistent cybersecurity challenges. High-profile incidents, such as the disruption of services at the All India Institute of Medical Sciences (AIIMS) in 2022 and the thwarted cyberattack on the G20 summit website in 2023, emphasize the need for continuous vigilance. As cyberattacks become increasingly sophisticated, India’s cybersecurity infrastructure will need to evolve to address emerging threats. By prioritizing investment in advanced cybersecurity capabilities and fostering national coordination, India can better protect its digital infrastructure and ensure resilience against future cyber threats.
Reference: