Cyber Incident Victim: Army College of Nursing
Date:
Apr 2025
Location:
India
Summary
The Army College of Nursing's website was hacked by a Pakistan‑based group called Team Insane PK shortly after a terrorist attack in Pahalgam, with the attackers posting an inflammatory message referencing the two‑nation theory. The same group has previously carried out distributed denial of service attacks on Indian government and educational sites, including actions ahead of a G20 summit and a defacement of the Burger Singh restaurant chain after a promotional code sparked controversy. Army officials said the autonomous institution, administered by the Army Welfare Education Society, will seek assistance from the Indian Computer Emergency Response Team to address the breach.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 2 motives | 2 techniques |
| Threat Actor | Type | Location |
|---|---|---|
| 1 actor | Available to members | Available to members |
Description
Following the terrorist attack in Pahalgam, Jammu and Kashmir, the website of the Army College of Nursing was compromised. The intrusion occurred shortly after India announced a series of counter‑measures against Pakistan, including the suspension of the Indus Waters Treaty and the declaration of Pakistani defence advisors in New Delhi as persona non grata. India further escalated the situation by revoking most Pakistani visas and giving most Pakistani nationals 72 hours to leave the country. Pakistan responded with its own measures, stating it would hold bilateral agreements such as the Simla Agreement in abeyance and closing its airspace to Indian airlines.
On the Friday after these diplomatic exchanges, the hackers placed an inflammatory message on the Army College of Nursing’s website that referenced the two‑nation theory. The message was attributed to a Pakistan‑based hacker collective known as Team Insane PK. Army sources described the Army College of Nursing as an autonomous institution administered by the Army Welfare Education Society. They indicated that the institution would need to request assistance from the Indian Computer Emergency Response Team (CERT‑In) to address the breach.
Team Insane PK has been linked to previous distributed denial of service attacks and other cyber intrusions against Indian government sites, private companies, and educational institutions. The group is reported to have targeted government websites in the lead‑up to the 2023 G20 summit held in India. Their notoriety grew after a 2024 incident in which they altered portions of the Burger Singh website and added a digital graffiti wall following the use of the promo code “FPak20”. Burger Singh responded by keeping the graffiti visible for a day, describing it as an “open mic night for hackers,” and downplaying the impact in a social‑media post.