May 27, 2025
Staff Report
LAHORE:
A massive global data breach has compromised the personal information of more than 180 million users worldwide, including data linked to users in Pakistan, prompting the National Cyber Emergency Response Team (PKCERT) to issue an urgent nationwide advisory.
According to PKCERT, sensitive information including passwords and account credentials from leading global platforms — such as Google, Facebook, Apple, Instagram and Snapchat — has been leaked, putting users at risk of identity theft, unauthorised access, and potential cyberattacks.
The advisory, published on PKCERT’s official website, also warned that government and financial systems may be endangered by the breach. “Even systems of government and sensitive agencies could be compromised if precautionary measures are not taken,” the statement read.
Pakistani users have been advised to immediately change the passwords of their online accounts and enable two-factor authentication to safeguard against further threats. The agency cautioned that the stolen data has reportedly been stored in databases being used for automated cyberattacks and other forms of digital exploitation.
It has urged users to refrain from storing passwords in emails or unsecured files, and recommended the use of password managers to improve digital hygiene. It also advised individuals and institutions to update antivirus and security software regularly and remain alert for unusual login activity.
“Institutions should notify potentially affected users without delay,” the advisory added, emphasising that failure to act promptly could pose a serious threat to the country’s digital infrastructure.
The Pakistan Telecommunication Authority (PTA) has repeatedly shared essential tips to protect themselves against data leaks.
This breach is among the largest reported in recent years and underscores growing concerns over cybersecurity vulnerabilities in both public and private digital systems.
This latest breach follows a significant incident in 2024, where a Joint Investigation Team (JIT) revealed that the personal data of approximately 2.7 million Pakistani citizens had been compromised between 2019 and 2023. The JIT found that NADRA offices in Karachi, Multan, and Peshawar were allegedly involved in the data leak, with the stolen data reportedly surfacing in Argentina and Romania. The investigation recommended disciplinary actions against various officials and upgrades to NADRA’s technology to prevent future breaches.
These incidents highlight the urgent need for robust data protection measures and comprehensive legislation to safeguard citizens’ personal information. Experts call for immediate action to address vulnerabilities and prevent further compromises.
