West Bengal Cyber Crime Wing Hit by Suspected Ransomware Attack, Sparks Major Investigation and Vendor Scrutiny

The West Bengal Police's Cyber Crime Wing (CCW) disclosed a serious breach at its central data centre, dealing a major blow to the state's cyber security efforts.This data center, which is critical for tracking and detecting cybercrime throughout the state, went entirely offline on July 28, causing panic and an active criminal investigation.

Initially, the private company managing the data center claimed that a ransomware attack had encrypted the system and even displayed what seemed to be a ransom note. However, investigators are not totally sure. They believe something more serious, intentional sabotage by the vendor itself.

The suspicion intensified after the corporation allegedly refused to hand over credentials and full access to state systems during a meeting just two days before the incident. The refusal triggered caution signs and now the police have filed a formal FIR.

Webel Technology Ltd set up the data centre through an e-tender in December 2023. The selected vendor was in charge of managing highly sensitive digital tools for the West Bengal Police's State Grid Project. By September 30, 2024, the entire setup including servers, storage, and forensic software was expected to be operational.

One of the system's important tools was CAT C5, which monitored app-to-app interactions, particularly VoIP calls. However, problems existed before to the intrusion. Despite repeated requests, the vendor allegedly delayed handing over management of the system. On July 25, a final meeting with top police officers failed to provide any results. Within two days, VPN access failed, and by July 28, the system had gone down.

The FIR accuses the vendor of having exclusive remote access and potentially locking or damaging the system while claiming it was a ransomware issue. But now, even top police officials are being investigated. Investigators are looking into if there was any internal incompetence or complicity in giving one private company access over such a sensitive system. Officials are being questioned under various sections of the Bharatiya Nyaya Sanhita (BNS) and the IT Act on charges of criminal conspiracy, cheating, and breach of trust.

A senior officer summarized the situation by stating that this isn't just a technological issue, but a total system failure. The very possibility of sabotage, he noted, highlights just how weak the internal controls were. As the investigation unfolds, this case serves as a wake-up call for stronger oversight, stricter access controls, and more transparent protocols when dealing with sensitive digital systems—especially in sectors as vital as cybercrime enforcement.

Information referenced in this article is from The 420.