Ahmedabad’s cybercrime investigation into bomb threats sent to schools, courts, a municipal office and Narendra Modi Cricket Stadium has traced the emails to accounts operated from locations in Pakistan and Bangladesh, according to Cyber Crime DCP Lavina Sinha, as authorities examine how hacked Gmail accounts were allegedly used to target public institutions.
The threats were sent to around 16 locations in the first incident, including schools, the Ahmedabad Municipal Corporation mayor’s office, the Gujarat High Court, the metro court, the district and sessions court, the city civil court and Narendra Modi Cricket Stadium. The emails reportedly warned of bomb blasts and included references to specific times and Khalistani-related text.
According to the information provided by the cybercrime authorities, the first set of emails was sent on the 7th from accounts operating under false identities, including the names Denise Long and WJ Ken. Investigators visited different schools and court complexes and obtained the headers of the Gmail accounts used to send the messages.
A second set of threatening emails was received on 27 October. This communication reportedly referred to 19 locations, including 14 schools, the mayor’s office at Danapith, the Gujarat High Court, the metro court, the Gheekanta court, the city civil court and Narendra Modi Cricket Stadium. A second case was registered with the cybercrime unit, and investigators sought further details connected to the email accounts.
The inquiry indicated that the accounts had been operated from Rangpur in Bangladesh and Lahore in Pakistan, the report said. The police are examining the chain through which the accounts were allegedly acquired and used. The locations named in the threats cover education, judicial, civic and sports facilities, bringing multiple layers of Ahmedabad’s public infrastructure into the investigation.
The report also referred to an earlier investigation into threats issued in the name of a Khalistani organisation, in which an accused person was arrested in West Bengal. During questioning, the accused allegedly told investigators that hacked Gmail accounts had been sold to a person in Bangladesh, who then sold them to a person in Pakistan. Payment for the accounts was allegedly made through cryptocurrency.
The authorities are also examining whether compromised email accounts are being purchased through digital channels to create fear around festivals and major public events. The report said Telegram and WhatsApp were used in the broader process of acquiring or communicating about such accounts, although the specific operational details of the investigation have not been publicly established in the supplied material.
The investigation remains focused on identifying the individuals behind the emails, verifying the account trail and determining the full network involved. Cybercrime officials have registered a separate case in connection with the 27 October threats and are seeking additional information from the relevant email services.
