The Pakistan Bureau of Statistics (PBOS), the primary governmental body responsible for collecting and analyzing statistical data in Pakistan, has reportedly been compromised by the Funksec ransomware cyber group. This breach has resulted in unauthorized access to critical economic and agricultural data, raising concerns about national data security.
Details of the Breach
Funksec claims to have gained access to pbos.gov.pk, including confidential documents and economic data. The compromised information includes:
- Leaked Data:
- Sensitive PDF documents containing:
- Economic reports
- Crop, livestock, and animal statistics
- Names of associated owners
- Sensitive PDF documents containing:
- Access Details:
- Full access to pbos.gov.pk systems
- Ransom Demand:
- $3,000 USD
- Payment required to avoid the public release of data
- Data potentially targeted for sale to foreign entities
Potential Implications
- Economic Risks: Exposure of detailed economic and agricultural statistics may undermine governmental planning and strategic decisions.
- Privacy Violations: Disclosure of owner names associated with livestock and crops could lead to targeted misuse.
- National Security Concerns: Selling such data to foreign entities poses serious threats to economic sovereignty.
Funksec’s Message
The ransomware group has openly stated that failure to comply with their demands will result in the public release of the data. They further hinted that this information could be sold to interested governments or entities for exploitation.
Recommendations for PBOS
- Immediate Actions:
- Engage cybersecurity professionals to secure systems and assess the breach’s scope.
- Notify relevant stakeholders and individuals whose data may be at risk.
- Cooperate with law enforcement agencies to track and counter Funksec’s activities.
- Long-term Measures:
- Upgrade cybersecurity protocols, including encryption and intrusion detection systems.
- Conduct regular vulnerability assessments and audits.
- Train employees on recognizing and mitigating cyber threats.
