The stolen data, which was found in an unprotected file available online, includes usernames, passwords, email addresses, and website links. This information is linked to major platforms like Google, Microsoft, Apple, Facebook, Instagram, Snapchat, and even government, banking, and healthcare websites.
According to a report by Dynamite News, the data was gathered through malware called “infostealers.” These programs secretly collect personal information from infected devices. Shockingly, the stolen data was stored without any password protection or encryption, making it easily accessible to hackers.
PKCERT, which is responsible for protecting Pakistan’s digital systems, warned that people who use the same password for multiple sites are especially at risk. Hackers can use automated tools to break into other accounts using the leaked credentials.
What You Should Do Right Now
PKCERT has issued the following advice to all internet users:
• Change your passwords immediately, especially for important accounts.
• Turn on two-factor authentication (2FA) wherever possible.
• Use a password manager to create and store strong, unique passwords.
• Keep an eye on your account activity for any strange or unauthorized logins.
• Never store passwords in plain text or unsecured notes.
Government Response
Government agencies have been told to check if their systems or users are affected and to take immediate steps to secure their platforms. PKCERT warned that ignoring the issue could threaten critical digital services and national infrastructure.
This incident comes shortly after a 2024 investigation into a separate data leak at Pakistan’s National Database and Registration Authority (NADRA), which exposed the data of 2.7 million citizens from 2019 to 2023.
Cybersecurity experts across Pakistan are urging everyone to be extra careful, saying that cyberattacks could rise sharply in the coming days due to this leak. Both government departments and private companies are being asked to identify and protect vulnerable users right away.
Tags:
Cyber News