Cybersecurity and Human Rights in South Asia

South Asia, encompassing countries like India, Sri Lanka, and Bangladesh, has witnessed rapid digital growth, driven by high mobile penetration and the adoption of digital financial services. As of December 2024, India alone had 970 million internet subscribers, with a 54% annual data consumption growth rate, while Bangladesh reported 50% household internet penetration. However, this digital transformation has been accompanied by a surge in cyberattacks, posing significant challenges to governance, human rights, and privacy. This chapter examines three major cyberattacks in South Asia, the 2022 AIIMS ransomware attack in India, the 2023 Sri Lankan government cloud system attack and the 2016 Bangladesh Bank heist, through a legal and governance lens, analyzing their implications for human rights and privacy. By providing descriptive and historical analyses, the chapter aims to contribute to the discourse on cybersecurity, ethical considerations and human rights in the region.