If any person, dishonestly or fraudulently , does any act referred to in section 43, he shall be punishable with imprisonment for a term which may extend to three years or with fine which may extend to five lakh rupees or with both .
Explanation.— For the purposes of this section,—
(a) the word "dishonestly" shall have the meaning assigned to it in section 24 of the Indian Penal Code (45 of 1860);
(b) the word "fraudulently" shall have the meaning assigned to it in section 25 of the Indian Penal Code (45 of 1860).
Legal Commentary & Landmark Judgments: Section 66
Section 66 of the Information Technology Act (read with Section 66F) prescribes severe criminal punishment of imprisonment up to three years for computer-related offenses committed dishonestly or fraudulently, and up to life imprisonment for cyber terrorism.
Furthermore, Section 66F specifically punishes 'cyber terrorism'—acts committed with intent to threaten the unity, integrity, security, or sovereignty of India by denying authorized access, penetrating critical computer systems, or introducing computer contaminants—punishable with rigorous imprisonment for life.
Section 66 is the principal statutory charge applied in all hacking incidents, server breaches, ransomware attacks, and denial-of-service offenses across Indian cyber police stations. Mens rea (dishonest or fraudulent intent) is the critical element distinguishing civil tort under Section 43 from criminal offense under Section 66.