Cyber crime is both civil and criminal in nature. Some cyber offences attract criminal penalties (hacking, identity theft under IT Act), while others give rise to civil liability (data breaches causing financial loss, defamation online). The IT Act 2000 provides for both criminal prosecution and civil remedies.