The 2008 Mumbai attacks, also referred to as the 26/11 attacks, were a series of 12 coordinated Islamist terrorist attacks that took place from November 26 to 29 and were carried out by 10 members of Lashkar-e-Taiba, a Pakistan-based Islamist militant organization. A total of 175 people died, including nine of the attackers, with more than 300 injured.
Eight of the attacks occurred in South Mumbai at Chhatrapati Shivaji Maharaj Terminus, the Oberoi Trident, the Taj Mahal Palace and Tower hotel, the Leopold Cafe, the Cama Hospital, the Nariman House, the Metro Cinema, and in a lane behind the Times of India building and St. Xavier's College. In addition to the mass shootings, an explosion occurred at Mazagaon, in Mumbai's port area, and in a taxi at Vile Parle. By the early morning of 28 November, all sites except for the Taj Hotel had been secured by the Mumbai Police and security forces. On 29 November, India's National Security Guards conducted Operation Black Tornado to flush out the remaining terrorists; it culminated in the death of the last remaining terrorists at the Taj Hotel and ended the attacks.
Before his execution in 2012, Ajmal Kasab, the sole surviving attacker, who was captured by Mumbai Police, stated and confessed that the terrorists were members of the Lashkar-e-Taiba, and were controlled from Pakistan, corroborating initial claims from the Indian Government. Initially denying the claims, Pakistan later confirmed that the sole surviving perpetrator of the attacks was a Pakistani citizen. The subsequent capture and interrogation of David Headley, a Pakistani-American DEA informer, and Tahawwur Rana, a Canadian citizen of Pakistani origin and a former Pakistan Army Captain, who was Headley's partner, pointed to the involvement of rogue officials of Pakistan Army and ISI in the terrorist attacks, who provided support to the Lashkar-e-Taiba. Furthermore, Headley was also accused of traveling to Denmark to scout the offices of Danish newspaper Jyllands-Posten, which had published cartoons of Muhammad, and a nearby synagogue. The capture of Zabiuddin Ansari aka Abu Hamza in July 2012, an Indian national radicalized by Lashkar-e-Taiba, provided further clarity to the plot.
On 9 April 2015, the foremost ringleader of the attacks, Zakiur Rehman Lakhvi, was released on bail and disappeared; he was arrested again in Lahore on 2 January 2021. In 2018, former Pakistani prime minister Nawaz Sharif questioned the Pakistani government's allowance of those who committed the attacks to cross into India. In 2022, one of the masterminds of the attack, Sajid Majeed Mir —who had earlier been claimed to be dead by the Pakistan Government— was convicted for funding terrorist activities by an anti-terrorism court in Pakistan. Consequently, several masterminds such as LeT founder Hafiz Saeed and Zakiur Rehman Lakhvi, were convicted for terror financing in 2021-22, as Pakistan went into an economic crisis after the Financial Action Task Force (FATF) threatened the Government of Pakistan to be put in the FATF Blacklist for failure to comply on money laundering and financing of terrorism.
As of September 2025, it is one of the deadliest terrorist attacks that took place in Mumbai, as well as across India. Although the casualties were lower when compared to the 2006 Mumbai train bombings, which was also planned by the Lashkar-e-Taiba and that killed 209 and injured more than 700, the 10 terrorists inflicted massive property damage worth over $1 billion by fire, grenade attacks, and gunfire. The attacks strained diplomatic relations between India and Pakistan, and made a huge impact on law enforcement and security officials to deal with such scenarios in the future. The attacks also caused a major political impact on the then ruling government led by the United Progressive Alliance, as the same year, several other cities suffered from Islamic terrorism, which were also perpetrated by Pakistani terror groups.
Background- Many terrorist attacks had occurred in Mumbai since the 13 coordinated bomb explosions that killed 257 people on 12 March 1993. The 1993 attacks were carried out as revenge for the earlier Bombay riots, in which many Muslims were killed.
On 6 December 2002, a blast in a BEST bus near Ghatkopar station killed two people and injured 28. The bombing occurred on the 10th anniversary of the demolition of the Babri Mosque in Ayodhya. A bicycle bomb exploded near the Vile Parle station in Mumbai, killing one person and injuring 25 on 27 January 2003, a day before the visit of the Prime Minister of India Atal Bihari Vajpayee to the city. On 13 March 2003, a day after the 10th anniversary of the 1993 Bombay bombings, a bomb exploded in a train compartment near the Mulund station, killing 10 people and injuring 70. On 28 July 2003, a blast in a BEST bus in Ghatkopar killed 4 people and injured 32. On 25 August 2003, two bombs exploded in South Mumbai, one near the Gateway of India and the other at Zaveri Bazaar in Kalbadevi. At least 44 people were killed and 150 injured. On 11 July 2006, seven bombs exploded within 11 minutes on the Suburban Railway in Mumbai, killing 209 people, including 22 foreigners and more than 700 injured. According to the Mumbai Police, the bombings were carried out by Lashkar-e-Taiba (LeT) and Students Islamic Movement of India (SIMI).
Training- A group of men said to number between 24 and 26 received training in marine warfare at a remote camp in mountainous Muzaffarabad in Pakistan.[why?] Part of the training was said to have taken place on the Mangla Dam reservoir in Pakistan.
The recruits went through extensive training:-Psychological: Indoctrination to Islamist jihadi ideas, including imagery of atrocities suffered by Muslims in India and globally. Basic combat: Lashkar's basic combat training and methodology course, the Daura Aam
Advanced training: Selected to undergo advanced combat training at a camp near Mansehra, a course the organisation calls the Daura Khaas. According to an unnamed source at the U.S. Defense Department, this includes advanced weapons and explosives training supervised by former members of the Pakistan Army, along with survival training and further indoctrination.
Commando training: Finally, an even smaller group was selected for specialized commando tactics training, and marine navigation training was given to the Fedayeen unit that was selected, to target Mumbai.
From the recruits, 10 were handpicked for the Mumbai mission. They also received training in swimming and sailing, besides the use of high-end weapons and explosives under the supervision of LeT commanders. According to a media report citing an unnamed former Department of Defense official of the US, the intelligence agencies of the US had determined[when?] that former officers from Pakistan's Army and Inter-Services Intelligence agency assisted actively and continuously in training. They were given blueprints of all the four targets – The Taj Mahal Palace Hotel, Oberoi Trident, Nariman House, and Chhatrapati Shivaji Maharaj Terminus.
Attacks- For a chronological guide, see Timeline of the 2008 Mumbai attacks. The terrorists first hijacked an Indian fishing boat and killed five people on board. The first events were detailed around 20:00 Indian Standard Time (IST) on 26 November, when 10 men in inflatable speedboats came ashore at two locations in Colaba. They reportedly told local Marathi-speaking fishermen who asked them who they were to "mind their own business" before they split up and went in two different ways. The fishermen's' subsequent report to the police department received little response and local police failed to act.
Chhatrapati Shivaji Maharaj Terminus. Bullet holes on the wall at the CSMT The Chhatrapati Shivaji Maharaj Terminus (CSMT) was attacked by two gunmen, Ismail Khan and Ajmal Kasab. Kasab was later caught alive by the police and identified by eyewitnesses. The attacks began around 21:30, when the two men entered the passenger hall and opened fire with AK-47 assault rifles. The attackers killed 58 people and injured 104 others, their assault ending at about 22:45. Security forces and emergency services arrived shortly afterwards. Announcements by a railway announcer, Vishnu Dattaram Zende, alerted passengers to leave the station, which saved many lives. The two gunmen fled the scene and fired at pedestrians and police officers in the streets, killing eight police officers. The attackers passed a police station. Knowing that they were outgunned against the heavily armed terrorists, the police officers at the station, instead of confronting the terrorists, decided to switch off the lights and secure the gates.
The attackers then headed towards Cama Hospital with intent to kill patients, but the hospital staff locked all of the patient wards. A team of the Mumbai Anti-Terrorist Squad, led by Police Chief Hemant Karkare, searched the Chhatrapati Shivaji Terminus and then left in pursuit of Kasab and Khan. Kasab and Khan opened fire on the vehicle in a lane next to the hospital and received return fire in response. Karkare, Vijay Salaskar, Ashok Kamte, and three of their officers were killed. The only survivor, Constable Arun Jadhav, was severely wounded. Kasab and Khan seized the police vehicle but later abandoned it and seized a passenger car instead. They then ran into a police roadblock, which had been set up after Jadhav radioed for help. A gun battle then ensued in which Khan was killed and Kasab was wounded. After a physical struggle, Kasab was arrested. A police officer, Tukaram Omble, was also killed when he tried to disarm Kasab by wrestling his weapon away from him.
Leopold Cafe- Bullet marks left at Leopold Cafe The Leopold Cafe, a popular restaurant and bar on Colaba Causeway in South Mumbai, was one of the first sites to be attacked. Two attackers, Shoaib alias Soheb and Nazir alias Abu Umer, opened fire on the cafe on the evening of 26 November between 21:30 and 21:48, killing 10 people (including some international visitors) and injuring many more.
Bomb blasts in taxis- Two explosions happened in taxis caused by time bombs. The first one occurred at 22:40 at Vile Parle, killing the driver and a passenger. The second explosion took place at Wadi Bunder between 22:20 and 22:25. Three people, including the driver of the taxi, were killed, and about 15 others were injured.
Taj Mahal Palace Hotel and Oberoi Trident The damaged Oberoi Trident hotel- Two hotels, the Taj Mahal Palace Hotel and the Oberoi Trident, were among the four locations targeted. Six explosions were reported at the Taj Hotel – one in the lobby, two in the elevators, and three in the restaurant – and one at the Oberoi Trident. At the Taj, firefighters rescued 200 hostages from windows using ladders during the first night.
CNN initially reported on the morning of 27 November 2008 that the hostage situation at the Taj Hotel had been resolved and quoted the police chief of Maharashtra, stating that all hostages were freed; later that day, though, two attackers were found to be still holding hostages, including foreigners, in the Taj Hotel.
The first floor of the Taj Hotel was completely gutted. Several members of the European Parliament Committee on International Trade were staying at the Taj Hotel when it was attacked, but none were harmed. British Conservative Member of the European Parliament (MEP) Sajjad Karim (who was in the lobby when attackers initially opened fire there) and German Social Democrat MEP Erika Mann were hiding in different parts of the building. Also reported present was Spanish MEP Ignasi Guardans, who was barricaded in a hotel room. Another British Conservative MEP, Syed Kamall, reported that he along with several other MEPs left the hotel and went to a nearby restaurant shortly before the attack. Kamall also reported that Polish MEP Jan Masiel was thought to have been sleeping in his hotel room when the attacks started, but eventually left the hotel safely. Kamall and Guardans reported that a Hungarian MEP's assistant was shot. Also caught up in the shooting were the President of Madrid, Esperanza Aguirre, while checking in at the Oberoi Trident, and Indian MP N. N. Krishnadas of Kerala and Gulam Noon while having dinner at a restaurant in the Taj Hotel. Gautam Adani, a billionaire business tycoon of India, was having dinner in the Taj on November 26; he hid in the hotel kitchen and later in the toilet, and came out safely the next morning.
Nariman House- Front view of the Nariman House a week after the attacks Nariman House, a Chabad Lubavitch Jewish centre in Colaba known as the Mumbai Chabad House, was taken over by two attackers, and several residents were held hostage. Police evacuated adjacent buildings and exchanged fire with the attackers, wounding one. Local residents were told to stay inside. The attackers threw a grenade into a nearby lane, causing no casualties. NSG commandos arrived from Delhi, and a naval helicopter took an aerial survey. During the first day, 9 hostages were rescued from the first floor. The following day, the house was stormed by NSG commandos fast-roping from helicopters onto the roof, covered by snipers positioned in nearby buildings. After a long battle,[clarification needed] one NSG commando, Sergeant Gajender Singh Bisht was killed, as were both perpetrators. Rabbi Gavriel Holtzberg and his wife Rivka Holtzberg, who was six months pregnant, were shot and killed along with four other hostages inside the house by the attackers.
According to radio transmissions picked up by Indian intelligence, the attackers "would be told by their handlers in Pakistan that the lives of Jews were worth 50 times those of non-Jews". Injuries on some of the bodies indicated that they may have been tortured. NSG Commandos beginning the assault on Nariman House by fast-roping onto the terrace.
NSG raid- During the attacks, both hotels were surrounded by Rapid Action Force personnel, Marine Commandos (MARCOS), and National Security Guards (NSG) commandos. When reports emerged that attackers were receiving television broadcasts, feeds to the hotels were blocked. Security forces stormed both hotels, and all nine attackers were killed by the morning of 29 November. Major Sandeep Unnikrishnan of the NSG was fatally shot during the rescue of Commando Sunil Yadav, who was hit in the leg by a bullet during the rescue operations at Taj. 32 hostages were killed at the Oberoi Trident.
NSG commandos then took on the Nariman House, and a naval helicopter took an aerial survey. During the first day, nine hostages were rescued from the first floor. The following day, the house was stormed by NSG commandos fast-roping from helicopters onto the roof, covered by snipers positioned in nearby buildings. NSG Commando Sergeant Gajender Singh Bisht, who was part of the team that fast-roped onto Nariman House, died from injuries sustained by a grenade after a long battle in which both perpetrators were also killed. By the morning of 28 November, the NSG had secured the Jewish outreach centre at Nariman House, as well as the Oberoi Trident hotel. They also incorrectly believed that the Taj Palace and Towers had been cleared of attackers, and soldiers were leading hostages and holed-up guests to safety, and removing bodies of those killed in the attacks. However, later news reports indicated that two or three attackers were still in the Taj, with explosions heard and gunfire exchanged. Fires were also reported at the ground floor of the Taj, with plumes of smoke arising from the first floor. The final operation at the Taj Palace hotel was completed by the NSG commandos at 08:00 on 29 November, killing three attackers and resulting in the conclusion of the attacks. The NSG rescued 250 people from the Oberoi, 300 from the Taj, and 60 (members of 12 different families) from Nariman House. In addition, police seized a boat filled with arms and explosives anchored at Mazgaon dock off Mumbai Harbour.
Attribution- Ajmal Kasab at Chhatrapati Shivaji Terminus with an AK-47 in his hand Main articles: Attribution of the 2008 Mumbai attacks and Erroneous reporting on the 2008 Mumbai attacks. The search regarding the identity of the terrorists started during the first attacks. During the searches, an unknown group calling itself the Mujahideen Hyderabad Deccan claimed responsibility for attacks in an email, which was later traced to Pakistan and was regarded as hoax. The Mumbai attacks were planned and directed by Lashkar-e-Taiba militants inside Pakistan and carried out by 10 young armed men trained and sent to Mumbai and directed from inside Pakistan by mobile phones and VoIP.
In July 2009, Pakistani authorities confirmed that LeT plotted and financed the attacks from LeT camps in Karachi and Thatta. In November 2009, Pakistani authorities charged seven men they had arrested earlier, of planning and executing the assault.
Mumbai police department originally identified 37 suspects—including two Pakistan Army officers—for their alleged involvement in the plot. All but two of the suspects, many of whom are identified only through aliases, are Pakistani. David Coleman Headley and Tahawwur Hussain Rana, arrested in the United States in October 2009 for other attacks, were also found to have been involved in planning the Mumbai attacks. One of these men, Pakistani American David Headley (born Daood Sayed Gilani), was found to have made several trips to India before the attacks, and gathered video and GPS information on behalf of the plotters.
In April 2011, the United States issued arrest warrants for four Pakistani men as suspects in the attack. Three men, Sajid Mir, Abu Qahafa, and Mazhar Iqbal, alias "Major Iqbal", were believed to be members of Lashkar-e-Taiba, and helped plan and train the attackers.
Negotiations with Pakistan- Pakistani Prime Minister Yousaf Raza Gillani and President Asif Ali Zardari condemned the attacks. Pakistan promised to assist in the investigation, and President Zardari vowed "strong action against any Pakistani elements found involved in the attack". Pakistan initially denied that Pakistanis were responsible for the attacks, blaming plotters in Bangladesh and Indian criminals, a claim refuted by India, and saying they needed information from India on other bombings first. Pakistani authorities finally agreed that Ajmal Kasab was a Pakistani on 7 January 2009, and registered a case against three other Pakistani nationals.
The Indian government supplied evidence to Pakistan and other governments, in the form of interrogations, weapons, and call records of conversations during the attacks. In addition, Indian government officials said that the attacks were so sophisticated that they must have had official backing from Pakistani "agencies", an accusation denied by Pakistan.
Pakistan arrested a few members of Jamaat ud-Dawa and briefly put its founder under house arrest, but he was found to be free a few days later. A year after the attacks, Mumbai police continued to complain that Pakistani authorities were not co-operating by providing information for their investigation. Meanwhile, journalists in Pakistan said security agencies were preventing them from interviewing people from Kasab's village. The then Home Minister P. Chidambaram said the Pakistani authorities had not shared any information about American suspects David Headley and Tahawwur Hussain Rana, but that the FBI had been more forthcoming.
An Indian report, summarising intelligence gained from India's interrogation of David Headley, was released in October 2010. It alleged that Pakistan's intelligence agency (ISI) had provided support for the attacks by providing funding for reconnaissance missions in Mumbai. The report included Headley's claim that Lashkar-e-Taiba's chief military commander, Zaki-ur-Rahman Lakhvi, had close ties to the ISI. He alleged that "every big action of LeT is done in close coordination with ISI." In 2018, during an interview with newspaper Dawn, Pakistan's former Prime Minister Nawaz Sharif questioned Pakistan's inaction in preventing the Mumbai attacks.
Police looking for attackers outside Colaba.
Investigation- According to investigations, the attackers travelled by sea from Karachi, Pakistan, across the Arabian Sea, hijacked the Indian fishing trawler Kuber, killed the crew of four, then forced the captain to sail to Mumbai. After murdering the captain, the attackers entered Mumbai on a rubber dinghy. The captain of Kuber, Amar Singh Solanki, had earlier been imprisoned for six months in a Pakistani jail for illegally fishing in Pakistani waters. The attackers stayed and were trained by the Lashkar-e-Taiba in a safehouse at Azizabad in Karachi before boarding a small boat for Mumbai.
David Headley was a member of Lashkar-e-Taiba, and between 2002 and 2009, Headley travelled extensively as part of his work for LeT. Headley received training in small arms and countersurveillance from LeT, built a network of connections for the group, and lead in scoping out targets for Mumbai attack having allegedly been given $25,000 in cash in 2006 by an ISI officer known as Major Iqbal. The officer also helped him arrange a communications system for the attack and oversaw a model of the Taj Hotel, so that gunmen could know their way inside the target, according to Headley's testimony to Indian authorities. Headley also helped ISI recruit Indian agents to monitor Indian troop levels and movements, according to a US official. At the same time, Headley was also an informant for the US Drug Enforcement Administration, and Headley's wives warned American officials of Headley's involvement with LeT and his plotting attacks, warning specifically that the Taj Hotel may be their target.
US officials believed that the ISI officers provided support to LeT militants who carried out the attacks. Disclosures made by former American intelligence contractor Edward Snowden in 2013 revealed that the Central Intelligence Agency (CIA) had intercepted communications between the Lashkar boat and the LeT headquarters in Pakistan-administered Kashmir and passed the alert on to RAW on 18 November, eight days before the terrorists actually struck Mumbai. In the hours after the attack, the New York City Police Department sent Brandon del Pozo, an official from their intelligence division, to investigate the incident to understand what vulnerabilities its methods posed for New York City.
The arrest of Zabiuddin Ansari, alias Abu Hamza, in June 2012 provided further clarity on how the plot was hatched. According to Abu Hamza, the attacks were previously scheduled for 2006, using Indian youth for the job. However, a huge cache of AK-47s and RDX, which were to be used for the attacks, was recovered from Aurangabad in 2006, thus leading to the dismantling of the original plot. Subsequently, Abu Hamza fled to Pakistan and along with Lashkar commanders, scouted for Pakistani youth to be used for the attacks. In September 2007, 10 people were selected for the mission. In September 2008, these people tried sailing to Mumbai from Karachi, but could not complete their mission due to choppy waters. These men made a second attempt in November 2008, and successfully managed to execute the final attacks. David Headley's disclosures that three Pakistani army officers were associated with the planning and execution of the attack were substantiated by Ansari's revelations during his interrogation.
After Ansari's arrest, Pakistan's Foreign Office claimed they had received information that up to 40 Indian nationals were involved in the attacks.
In his confession, Ajmal Kasab, the only gunman captured, shared the location of LeT's training camps in Muridke, Pakistan, called as Markaz Taiba, and in Muzzafarabad, apart from the routine of their training, which included indoctrination, basic combat, advanced weapons and explosives, and commando tactics. On 7 May 2025, the Muridke camp was destroyed in a missile strike by the Indian Armed Forces in retaliation for the Pahalgam terrorist attack, which was also perpetrated by the Lashkar-e-Taiba. The strikes reportedly killed Lashkar's HQ chief Mudassar aka Abu Jundal(not to be confused with 26/11 co-conspirator Zabiuddin Ansari who used the alias Abu Jundal) among several other terrorists.
Method- The attackers had planned the attack several months ahead of time, and knew some areas well enough to vanish and reappear after security forces had left. Several sources have quoted Kasab telling the police that the group received help from Mumbai residents. The attackers used at least three SIM cards purchased on the Indian side of the border with Bangladesh. There were also reports of a SIM card purchased in the US state of New Jersey. Police had also mentioned that Faheem Ansari, an Indian Lashkar operative who had been arrested in February 2008, had scouted the Mumbai targets for the November attacks. Later, the police arrested two Indian suspects, Mikhtar Ahmad, who is from Srinagar in Kashmir, and Tausif Rehman, a resident of Kolkata. They supplied the SIM cards, one in Calcutta, and the other in New Delhi.
The attackers used a satellite phone and cell phones to talk to each other, as well as their handlers who were based in Pakistan. In transcripts intercepted by Indian authorities between the attackers and their handlers, the handlers provided the attackers with encouragement, tactical advice, and information gained from media coverage. The attackers used both personal cell phones and those obtained from their victims to communicate with each other and the news media. Although the attackers were encouraged to murder hostages, the attackers were in communication with the news media via cell phones to make demands in return for the release of hostages. This was believed to be done to further confuse Indian authorities that they were dealing with primarily a hostage situation.
Type 86 grenades made by China's state-owned Norinco were used in the attacks. Also, indications arose that the attackers had been taking cocaine. The gunman who survived said that the attackers had used Google Earth to familiarise themselves with the locations of buildings used in the attacks.
Of the 10 gunmen, nine were subsequently shot dead and one was captured by security forces. Witnesses reported that they seemed to be in their early 20s, wore black T-shirts and jeans, and smiled and looked happy as they shot their victims. Initially, some of the attackers reported to be British citizens, but the Indian government later stated that there was no evidence to confirm this. Similarly, early reports of 12 gunme were also later shown to be incorrect.
On 9 December, the 10 attackers were identified by Mumbai police, along with their home towns in Pakistan: Ajmal Amir Kasab from Faridkot, Abu Ismail Dera Ismail Khan from Dera Ismail Khan, Hafiz Arshad and Babr Imran from Multan, Javed from Okara, Shoaib from Sialkot, Nazir Ahmed and Nasir from Faisalabad, Abdul Rahman from Arifwalla, and Fahadullah from Dipalpur Taluka. Dera Ismail Khan is in the North-West Frontier Province; the rest of the towns are in Pakistani Punjab.
On 6 April 2010, the Home Minister of Maharashtra, informed the assembly that the bodies of the nine killed Pakistani gunmen from the 2008 attack on Mumbai were buried in a secret location in January 2010. The bodies had been in the mortuary of a Mumbai hospital after Muslim clerics in the city refused to let them be buried on their grounds.
Attackers- Only one of the attackers, Ajmal Kasab, survived the attack. He was hanged in Yerwada Central Jail in 2012.
Arrests- Main articles: Ajmal Kasab and Zabiuddin Ansari Ajmal Kasab was the only attacker arrested by police. At first, he deposed to police inspector Ramesh Mahale that he had come to India "to see Amitabh Bachchan's bungalow", and that he was apprehended by the Mumbai Police outside the bungalow. Much of the information about the attackers' preparation, travel, and movements comes from his subsequent confessions to the Mumbai police.
On 12 February 2009, Pakistani Interior Minister Rehman Malik said that Pakistani national Javed Iqbal, who acquired VoIP phones in Spain for the Mumbai attackers, and Hamad Ameen Sadiq, who had facilitated money transfer for the attack, had been arrested. Two other men known as Khan and Riaz, but whose full names were not given, were also arrested. Two Pakistanis were arrested in Brescia, Italy (east of Milan), on 21 November 2009, after being accused of providing logistical support to the attacks and transferring more than US$200 to Internet accounts using a false ID. They had Red Corner Notices issued against them by Interpol for their suspected involvement and it was issued after the last year's strikes.
In October 2009, two Chicago men were arrested and charged by the FBI for involvement in "terrorism" abroad, David Coleman Headley and Tahawwur Hussain Rana. Headley, a Pakistani American, was charged in November 2009 with scouting locations for the 2008 Mumbai attacks. Headley is reported to have posed as an American Jew and is believed to have links with militant Islamist groups based in Bangladesh. On 18 March 2010, Headley pleaded guilty to a dozen charges against him thereby avoiding going to trial.
In December 2009, the FBI charged Abdur Rehman Hashim Syed, a retired major in the Pakistani Army, for planning the attacks in association with Headley. On 15 January 2010, in a successful snatch operation, R&AW agents nabbed Sheikh Abdul Khwaja, one of the handlers of the 26/11 attacks, chief of HuJI India operations and a most wanted suspect in India, from Colombo, Sri Lanka, and brought him over to Hyderabad, India, for formal arrest.
On 25 June 2012, the Delhi Police Department arrested Zabiuddin Ansari, alias Abu Hamza, one of the key suspects in the attack at the Indira Gandhi International Airport in New Delhi. His arrest was touted as the most significant development in the case since Kasab's arrest. Security agencies had been chasing him for three years in Delhi. Ansari is a LeT ultra and the Hindi tutor of the 10 attackers who were responsible for the Mumbai attacks in 2008. He was apprehended, after he was arrested and deported to India by Saudi Intelligence officials as per official request by Indian authorities. After Ansari's arrest, investigations revealed that in 2009 he allegedly stayed for a day in a room in Old Legislators's Hostel, belonging to Fauzia Khan, a former MLA and minister in Maharashtra Government. The minister, however, denied having any links with him. Home Minister P. Chidambaram asserted that Ansari was provided a safe place in Pakistan and was present in the control room, which could not have been established without active State support. Ansari's interrogation further revealed that Sajid Mir and a Pakistani Army major visited India under fake names as cricket spectators to survey targets in Delhi and Mumbai for about a fortnight.
Sajid Mir, a Pakistani citizen and key operative of the militant Islamic extremist group LeT, is seen as one of the main organizers of the 2008 attacks. He has been called the "mastermind" and "project manager". Mir is on the U.S. Federal Bureau of Investigation's Most Wanted list and the United States Department of State offers in its Rewards for Justice Program, a reward of up to $5 million for information leading to the arrest and conviction of Mir. Mir has carried out terrorism operations in different parts of the world, including France.
Jason M. Blazakis, professor of practice at Middlebury Institute of International Studies at Monterey, stated in 2018 in The Hill: "A lethal, miasmic mix of bureaucratic inertia, diplomatic dysfunction and misperception has contributed to the fact that LeT members Sajid Mir, Mazhar Iqbal, Abu Qahafa (his nom de guerre), and their ISI handler, Major Iqbal (no relation to Mazhar), roam free."
On April 10, 2025, the NIA formally arrested Tahawwur Rana after his arrival from the U.S.



