Gujarat Police have uncovered a large interstate cybercrime network allegedly involved in sending bomb-threat emails to government offices, educational institutions and courts, with investigators recovering 5,13,847 unique email IDs and corresponding passwords.
The investigation, led by the Gujarat Police Cyber Centre of Excellence, began after a threatening email was received by the Gujarat government's Legislative and Parliamentary Affairs Department on September 10.
Editorial Insight
Key Highlights
Important points readers should notice.
Issue/Event: Interstate cyber network linked to alleged bomb-threat emails uncovered
Location: Gujarat, Bihar and Jharkhand
Authority/Organisation: Gujarat Police Cyber Centre of Excellence
Action Taken: Two accused arrested and 5,13,847 email IDs and passwords recovered
Impact: Police are investigating possible wider cybercrime activity, foreign links and misuse of digital platforms
The email reportedly threatened attacks on key government institutions and prominent political figures, including the Gujarat Chief Minister's Office, the state Legislative Assembly, Prime Minister Narendra Modi and Union Home Minister Amit Shah. It also referred to countries cooperating with India during the BRICS Summit in New Delhi.
Technical investigation traced the digital trail to Bhagalpur in Bihar, following which Gujarat Police arrested Roshan Kumar. During questioning, investigators allegedly obtained information about another accused who had supplied the email credentials.
Police subsequently arrested Gulshan Kumar Kaushal Singh in Deoghar, Jharkhand.
Editorial Analysis
Why This Matters
The case highlights the growing security challenge posed by large-scale misuse of online accounts. The recovery of more than 5.13 lakh email credentials suggests investigators are dealing with a potentially much wider digital network rather than an isolated bomb-threat incident. The suspected foreign funding angle and the planned questioning of Google could further expand the investigation into cyber infrastructure, account-security safeguards and the movement of digital identities across borders.
The recovery of 5,13,847 email IDs and passwords has emerged as a major development in the investigation. Police suspect the credentials were intended for sending threatening communications to government offices, schools, colleges and courts, as well as for other cybercrime activities. Investigators are now examining how the accounts were created, how they were distributed and whether they were used in other cases.
Google Security Under Investigation
The scale of the recovered email network has also brought Google's account-security systems into focus.
A senior Gujarat cybercrime official has said police plan to question Google over how such a large number of Gmail accounts could allegedly be created and operated despite security measures including two-factor authentication.
Police are also expected to seek information from Google about account-creation safeguards and whether existing security mechanisms were bypassed. The investigation could therefore examine not only the individuals allegedly operating the network but also how the digital infrastructure was misused at such a large scale.
Bangladesh and Cryptocurrency Angle
Investigators are also probing a suspected Bangladesh connection to the network.
Preliminary findings indicate that the accused may have received financial support or instructions from Bangladesh-based associates. Police are also examining cryptocurrency wallets and related financial transactions as part of the investigation.
However, the full foreign funding chain and the identities of any overseas associates have not yet been conclusively established, and the investigation remains underway.
The case has raised wider concerns over the use of mass-created digital identities for cybercrime and threatening communications, particularly when such accounts can potentially be used across multiple jurisdictions.
