Pakistan Reports Over 1,000 Cyberattacks in 2026 as National CERT Expands AI Monitoring

Pakistan has recorded more than 1,000 cyberattacks during 2026, highlighting growing concerns over the security of the country's digital infrastructure and the protection of sensitive information. The figures were disclosed by National Computer Emergency Response Team (National CERT) Director General Haider Abbas during a meeting of the National Assembly Standing Committee on Information Technology and Telecommunications.

Briefing lawmakers on the country's cybersecurity capabilities, Abbas revealed that National CERT currently operates with a workforce of 70 employees. He explained that the organisation uses artificial intelligence to identify and monitor potential cyber threats, although most of its operations continue to depend on human expertise. According to the director general, AI-powered systems account for approximately 30% of the organisation's work, while the remaining 70% is carried out manually.

The growing use of artificial intelligence in cybersecurity prompted questions from committee members about potential vulnerabilities associated with the technology. Lawmakers sought clarification on whether AI-based monitoring systems could introduce additional security risks or compromise existing protective measures. Responding to these concerns, Abbas explained that Pakistan has established a dedicated security monitoring centre to detect suspicious activity, assess emerging threats and strengthen the country's ability to respond to cyber incidents.

The committee also discussed the increased risk of cyberattacks during nationally significant occasions. The chairman highlighted concerns about hacking attempts around Independence Day on August 14 and Defence Day on September 6, asking what preventive measures were being implemented to protect government institutions and critical digital systems during these periods.

Addressing institutional cybersecurity standards, Abbas informed the committee that Pakistan's Information Security Framework Rules, approved in 2023, provide a structured mechanism for evaluating cybersecurity preparedness across organisations. Under the framework, institutions are expected to undergo annual cybersecurity audits to identify weaknesses, assess compliance and improve their security arrangements. The IT secretary further informed lawmakers that provincial governments had nominated departments responsible for coordinating cybersecurity matters.

Data protection and digital governance also emerged as major areas of discussion. The Director General of the Pakistan Digital Authority warned that the expansion of digital infrastructure brings significant risks related to information security and personal data. He emphasised the importance of establishing a dedicated data regulator and ensuring effective oversight of artificial intelligence as digital technologies become increasingly integrated into public services and institutional operations.

Federal Minister for Information Technology and Telecommunication Shaza Fatima Khawaja clarified that regulatory bodies are responsible for establishing and enforcing standards rather than directly managing the internal operations or policymaking of individual organisations. She explained that data-related matters would be governed according to standards issued by the Pakistan Digital Authority, which was established as part of Prime Minister Shehbaz Sharif's Digital Pakistan vision.

During the proceedings, MNA Musa Gilani expressed concern about weaknesses in the protection of citizens' personal information. He called for stronger safeguards to prevent the misuse or unauthorised exposure of sensitive data and stressed the importance of keeping Pakistani citizens' information within the country's borders. The committee chairman acknowledged these concerns and assured members that the recommendations would be considered.

Lawmakers also reviewed the progress of the Pakistan Digital Authority, which the chairman praised for its work since beginning operations approximately a year earlier. Discussions included a proposed national commission for digital strategy, headed by the prime minister, intended to coordinate digital policy implementation across the provinces.

The disclosures underscore the challenges Pakistan faces as government services, financial systems and public institutions become increasingly dependent on digital infrastructure. With cyber threats continuing to evolve, stronger institutional safeguards, regular security assessments, responsible AI adoption and effective data protection oversight remain central to improving the country's cybersecurity preparedness.