Indian authorities have arrested two men in Andhra Pradesh on charges of leaking sensitive defence information to Pakistani contacts, in a case that has renewed scrutiny of security protocols at the Visakhapatnam naval base, home to the Eastern Naval Command and a critical hub for India's submarine and warship operations.

The suspects have been identified as Annam Sai Varaprasad, a civilian driver employed to ferry naval officers, and Pradeep Mukherjee, who worked as a civilian employee within the naval base itself. According to investigators, the two men maintained direct communication with handlers in Pakistan and shared one-time passwords (OTPs), credentials typically used to authenticate access to secure digital systems and accounts.

A Breach From Within the Support Staff

What makes this case particularly alarming to defence analysts is not the rank or technical expertise of those accused, but precisely the opposite. Neither suspect was a naval officer or a specialist with formal access to classified material. One was a driver; the other, a civilian employee performing support functions. Their alleged value to foreign handlers lay not in deep technical knowledge but in proximity, the kind of incidental access that comes from working alongside officers, overhearing conversations, observing movements, and potentially gaining visibility into devices and communications that pass through a sensitive installation.

This pattern is familiar to those who track espionage cases in India. Drivers, orderlies, contract staff, and other support personnel often occupy a blind spot in institutional security planning, which tends to concentrate vetting and monitoring resources on officers and technical staff with direct classified clearances. Yet it is frequently these peripheral roles, embedded in daily routines but subject to lighter scrutiny, that foreign intelligence services target for recruitment.

The sharing of OTPs is especially significant. These single-use codes are designed as a safeguard, a second layer of authentication meant to prevent unauthorized access even if a password is compromised. If OTPs tied to naval personnel or systems were indeed passed to Pakistani contacts, it suggests that whatever protections they were meant to enforce, whether for communication platforms, financial accounts, or internal systems, may have been circumvented, potentially giving outside actors a window into otherwise restricted digital spaces.

Why Visakhapatnam Matters

The Eastern Naval Command headquartered at Visakhapatnam is not a peripheral posting. It oversees India's naval presence in the Bay of Bengal and plays a central role in the country's submarine fleet, including nuclear-powered vessels. Any compromise of information flowing through or around this base carries implications well beyond a single breach; it touches on strategic deterrence capabilities and operational security for one of the Indian Navy's most sensitive commands.

Cases of this kind are not new. India's western and eastern coastal defence establishments have periodically reported instances of personnel, both military and civilian, being approached, cultivated, and in some cases compromised by Pakistani intelligence operatives, often through social media platforms, messaging apps, or intermediaries posing as romantic interests or business contacts. The methodology tends to be patient: small requests escalate over time, financial incentives are introduced, and compromised individuals find themselves unable to extricate from the relationship once compromising exchanges have occurred.

Structural Vulnerabilities

Security officials and analysts have long warned that India's defence establishment, for all its investment in hardware and frontline technology, remains vulnerable at its human edges. Vetting processes for contract and support staff are often less rigorous than those applied to uniformed personnel. Oversight of personal devices and digital behavior among civilian employees attached to military installations is uneven. And the sheer scale of India's defence apparatus, with hundreds of thousands of support personnel across bases nationwide, makes comprehensive monitoring an enormous logistical challenge.

This case adds to a recurring concern: that espionage threats to India's defence establishment increasingly exploit soft targets rather than attempting to penetrate hardened technical systems directly. Recruiting a driver or a support employee, individuals with legitimate, unremarkable reasons to be present on base, can prove more effective than attempting to breach firewalls or classified networks from the outside.

Authorities have not yet disclosed the full extent of the information allegedly passed to Pakistani contacts, nor the duration over which the communication is believed to have taken place. Investigations are ongoing, and officials are expected to examine whether the two men acted independently or as part of a broader network operating around the base.

The case is likely to prompt renewed calls within India's defence and intelligence circles for tightened vetting of civilian and contract staff attached to sensitive installations, along with closer monitoring of digital communications and financial transactions among personnel who, while not carrying security clearances themselves, nonetheless operate within arm's reach of the nation's most closely guarded military secrets.