Rakesh Handoo Arrested in Cyber-Terror Case Over Threat Messages Targeting J&K Employees

Jammu and Kashmir Police investigation into alleged online threats targeting Kashmiri Pandit employees

Rakesh Handoo Arrest: Probe Into Online Threats Against J&K Employees

By: News Desk | 26 October 2026

Police allege that the Kashmiri Pandit activist circulated and amplified online threat material; the case follows months of concern among PM package employees over posters containing names and personal details.

Srinagar: Jammu and Kashmir Police have arrested Kashmiri Pandit activist Rakesh Handoo, also known as “Bunty,” in Haryana’s Greater Faridabad in a case concerning the alleged circulation of online threat messages targeting minority employees and migrant workers in the Kashmir Valley.

A special team of Baramulla Police arrested Handoo on October 17, according to reports published by NDTV and India Today. Investigators allege that he repeatedly shared and circulated digital messages attributed to a group calling itself the United Liberation Council (ULC), which purportedly threatened Kashmiri Pandit employees and other workers in the Valley. The allegations have not been established in court. <Cite refs={[“turn534230view0″,”turn534230view1”]}/>

The arrest follows months of anxiety among employees appointed under the Prime Minister’s Rehabilitation Package (PMRP), after purported threat letters and posters appeared online in August. Some of the material reportedly carried names, addresses and vehicle details of employees, prompting calls for enhanced security at workplaces, residences and along daily travel routes. <Cite refs={[“turn534230view2″,”turn534230view3”]}/>

Baramulla FIR and allegations of online circulation

According to India Today, the case originated from a complaint by Rohit Raina, a PMRP employee posted in the Finance Department in Baramulla. The report identifies the case as FIR No. 151/2026, registered at Baramulla Police Station on September 21.

Investigators allege that Handoo used publicly accessible social media accounts to share, modify and circulate threat-related digital material purportedly issued by the ULC. Police further allege that the online circulation of the material contributed to fear among minority employees and migrant workers in Kashmir. <Cite refs={[“turn534230view0″,”turn299920search7”]}/>

India Today reported that the FIR invoked Sections 66F and 84C of the Information Technology Act. NDTV separately reported that Inspector General of Police Sujit Kumar said Handoo had been booked under the Unlawful Activities (Prevention) Act (UAPA). The precise combination of provisions should be confirmed against the FIR and formal grounds of arrest before publication. <Cite refs={[“turn534230view0″,”turn534230view1”]}/>

Police have also alleged that Handoo was served notices asking him to appear for questioning in Baramulla but did not comply. According to India Today, he was subsequently arrested in Greater Faridabad and moved on transit remand. These details are based on published accounts of the investigation. <Cite refs={[“turn534230view0″,”turn299920search7”]}/>

August threat posters raised security concerns

The arrest comes against the backdrop of threat posters that circulated online in August and raised fresh concerns over the safety of Kashmiri Pandit employees working in the Valley.

The Indian Express reported on August 24 that a poster dated August 23 and purportedly issued by the ULC had surfaced on social media. According to a letter from the All PM Package Employees Forum, the poster contained threats and personal information, including names, addresses and vehicle numbers of some employees.

At the time of that report, security agencies had yet to verify the poster’s authenticity. Employees called for a thorough investigation into the source of the material and protection for those whose personal details had appeared in it. <Cite refs={[“turn534230view2”]}/>

India Today reported on August 27 that the first online threat had emerged on August 6, warning Kashmiri Pandits working in the Valley to “change their ways”. A subsequent poster prompted renewed demands for security measures. The reports underline the distinction between the existence of threatening material online and independent confirmation of who produced it or whether every threat was genuine. <Cite refs={[“turn534230view3″,”turn534230view2”]}/>

The circulation of personal information added to employees’ concerns because it appeared to identify individuals and their vehicles. The employees’ forum sought a review of security arrangements at workplaces, residences and transit routes.

PM package employees and the question of security

The Prime Minister’s Rehabilitation Package was introduced to support the return and rehabilitation of displaced Kashmiri Pandits through government employment and related assistance. Thousands of employees recruited under the package work in different departments across Jammu and Kashmir.

NDTV reported that around 6,000 Kashmiri Pandits had received government jobs under the employment package launched in 2010. The scheme has remained central to efforts to support the community’s return and rehabilitation, while the safety of employees posted in the Valley has continued to be a major concern. <Cite refs={[“turn534230view1”]}/>

The latest threat episode renewed concerns among employees and their families about whether existing arrangements were adequate to protect them. NDTV reported that hundreds of PM package employees were placed on administrative leave for nearly three weeks following the threats and related security concerns. <Cite refs={[“turn534230view1”]}/>

The issue carries particular weight because PM package employees have previously protested over security following targeted attacks on members of the Kashmiri Pandit community. In 2022, attacks and killings led to months of demonstrations by package employees, many of whom demanded transfers to Jammu. NDTV reported that the government subsequently moved employees to locations considered safer within the Valley rather than agreeing to a blanket relocation to Jammu. <Cite refs={[“turn534230view1”]}/>

For employees, the immediate concerns are personal safety, secure working conditions and confidence that threats will be investigated promptly. The current case places renewed focus on identifying the source of online threats, verifying their authenticity and ensuring that personal information is not used to intimidate vulnerable individuals.

Omar Abdullah calls for a thorough investigation

Jammu and Kashmir Chief Minister Omar Abdullah had called on police and security agencies to take the August threats seriously and determine where the messages originated.

In remarks reported by India Today on August 27, Abdullah described the situation as a serious concern and urged the relevant agencies to conduct a full investigation. He also said law and order and security fell within the Lieutenant Governor’s remit, while stressing that the threats should not be treated lightly. <Cite refs={[“turn534230view3″,”turn299920search13”]}/>

The demand for an investigation reflects the need to establish who created the threatening material, whether it was authentic and how it was circulated. In the Handoo case, police allege that the accused played a role in amplifying the messages. The investigation will have to establish the evidence supporting those allegations through the legal process.

Arrest draws concern from a community leader

The arrest has also prompted a response from Kashmiri Pandit leader Sanjay Saraf, who described the action as unfortunate and called for the charges to be reviewed, according to NDTV.

Saraf’s response represents a critical reaction to the arrest. It does not determine the merits of the police case, which must be assessed through the evidence and legal proceedings. <Cite refs={[“turn534230view1″,”turn299920search3”]}/>

The case has brought two issues into focus: the need to protect Kashmiri Pandit employees and migrant workers from threats, and the need to establish individual responsibility through a fair investigation. Both require the authorities to verify the digital material, examine its circulation and present the evidence through the legal process.

Investigation remains underway

Police have described the evidence against Handoo as significant, while reports say the investigation is continuing. The central allegation is that he repeatedly circulated or amplified threatening digital material attributed to a group presenting itself as the United Liberation Council.

The arrest does not amount to a finding of guilt. Investigators must establish the origin and authenticity of the messages, the accused’s role in circulating them and whether the evidence meets the requirements of the law.

For PM package employees and other workers in the Valley, the broader concern remains the security of individuals whose names and personal details appear in threatening online material. The case has intensified attention on the need for timely verification, protection for those named in threats and accountability for anyone found responsible for unlawful intimidation.

As the investigation proceeds, the outcome will depend on the evidence gathered by police and the findings of the judicial process.

Related posts