CSIDB logo
Incident

Islamic Republic of Pakistan

Incident posture

Attack window
May 2022
Location
Pakistan
Status
Historical
CIA posture
Available to members
Updated
2026-07-13 14:31

Linked entities

Victim
Islamic Republic of Pakistan
Threat actors
0 actors
Sources
1 source

Timeline

Occurred
May 2022
Discovered
Pending
Disclosed
Pending
Resolved
Pending

Summary

A major cyber attack targeted the government of Pakistan’s websites, with the Ministry of Information Technology and Telecommunication confirming that the attempt on the National Telecommunication Corporation system was foiled. No data theft was reported, though the attack caused automatic suspension of several departmental websites due to the activated comprehensive cyber security defenses.

Motives

Detailed motive labels are available to members.

1 motive

TTPs

Detailed technique labels are available to members.

1 technique

Description

On Tuesday morning at 11:30 am, a major cyber attack was reported targeting the websites of the Government of Pakistan. The Ministry of Information Technology and Telecommunication confirmed the incident, stating that no data theft had occurred as a result of the attack. A spokesperson for the ministry quoted Federal Minister for IT and Telecom Aminul Haque, who said the attack was directed at the National Telecommunication Corporation (NTC) system under the IT Ministry. Haque noted that various government department websites are hosted on NTC servers, making them potential targets. He explained that the cyber‑attack attempt on the NTC system was foiled by the existing security measures. The minister attributed the failure of the attack to a comprehensive cyber security system already in place.

Despite the attack being unsuccessful in compromising data, its impact was felt across several government online services. Haque added that, as a precautionary measure, the websites of some departments were automatically suspended following the detection of the malicious activity. The automatic suspension was a built‑in response designed to prevent further exposure while the security team investigated. No further details about the attackers, their motives, or the specific techniques used were disclosed in the report. The ministry emphasized that the incident highlighted the effectiveness of its current defenses. The ministry stated that normal operations would be restored once the suspended sites were verified as safe.

Sources

Sources available to members: 1 source.

CSIDB