Digital Sabotage: Inside the Surveillance Toolkit Used Against BCG Founder

This investigation focuses on the digital forensics of Case HRPM-DTH20160, documenting the deployment of a sophisticated surveillance toolkit against Danish Iqbal Thanvi. The data reveals a coordinated effort to exfiltrate sensitive company data while simultaneously scrubbing forensic logs to hide the tracks of internal and state-aligned actors.

Key Findings

Evidence Scrubbing: On March 27, 2026, Yousuf (internal operative) abruptly terminated Horizon Technologies to bring in a 'night shift operative' specifically to scrub forensic logs.

Identity Hijacking: Documented instances of unauthorized password changes to core finance and MIS accounts (hassan@backcheckgroup.com).

Data Exfiltration: The 'Request to Assign Gmail Account to Salar' event (March 20, 2026) confirms the unauthorized configuration of exchange emails for external exfiltration.

Evidence & Data

The forensic hunt, categorized under hidden_records_hunt, identifies a 'Initial Technical Report' that investigative experts deem a technical impossibility, suggesting the forgery of official digital evidence. The Federal Investigation Agency (FIA) and NADRA are implicated in a 'Chain of Custody Gap,' where digital evidence seized during regulatory raids was likely tampered with before reaching the Islamabad High Court.

Legal Framework

The unauthorized access and data exfiltration violate the Prevention of Electronic Crimes Act (PECA) 2016, specifically Sections 3 and 4 regarding unauthorized access to information systems. These actions also infringe upon Article 12 of the UDHR and Article 17 of the ICCPR, protecting the right to privacy and correspondence.

Recommendations

Appointment of a third-party international digital forensic auditor to recover 'scrubbed' logs.

Legal inquiry into the FIA's handling of digital evidence chain-of-custody.

Sanctions against entities using the 'VeriSys' platform for unauthorized surveillance.

Read the full case file on HRPM: HRPM-DTH20160.