71,000 cyber attacks made on FBR portals every month: Tarin

Published October 1, 2021
This file photo shows Finance Minister Shaukat Tarin. — Reuters/File
This file photo shows Finance Minister Shaukat Tarin. — Reuters/File

ISLAMABAD: Finance Minister Shaukat Tarin has informed the National Assembly that on an average the Federal Board of Revenue (FBR) portals were subjected to 71,000 cyber attacks every month.

This volume has, over a couple of years, increased sharply as tools and methods available with the hackers are more powerful and sophisticated, Mr Tarin said in a written reply to a question from PPP MNA Raza Rabani Khar placed before the assembly on Wednesday.

This was the first detailed reply from the finance minister regarding protecting the data of taxpayers.

The minister said FBR had been authorised to procure cyber and information security-related hardware, software and services to protect the organisation from future attacks.

In a written reply, he said during the last three years (Feb 18, 2019 to Feb 22, 202; March 23, 2021; April 13, 2021 to August 19, 2021), FBR’s systems were breached three times (around 0.001pc success rate).

Finance minister recommends annual budget for technology refresh

“The breach in 2019 was not detected till the investigation into the latest breach in August 2021. The breach was minor in nature and the infrastructure hosting the FBR website was hardened. Therefore, a cyber breach-related audit was not carried out to date.”

However, Mr Tarin said there was an ongoing investigation into the current breach with the help of a third party. This third party is helping scan the entire FBR network, including all machines located in the field formations, in order to determine the possible point of the initial breach.

He said once this has been determined and remedial actions have been taken, a full third-party security audit will be carried out to determine any remaining vulnerabilities.

A full action plan to counter the vulnerabilities will be put together and its execution monitored.

“Therefore, a cyber breach-related audit was not carried out to date. Technology continues to evolve at breakneck speed and requires constant reinvestment.”

Historically, investment into technology at the FBR has remained restricted to specific periods directly related to financing being made available by donor agencies.

This method of investment creates technology debt in between such periods which can lead to vulnerabilities going unaddressed, which can consequently create opportunities for malicious actors such as what transpired during this recent event.

The minister said it was highly recommended that an annual budget for technology refresh be allocated to FBR, which would allow the organisation to keep its technology up to date and take full advantage of advancements taking place in that space. This should be equivalent to 0.05pc of the revenue collected which would have amounted to Rs2.4bn last year.

This amount would have been sufficient for the FBR to have upgraded much of its information security infrastructure which may have prevented the recent incident.

The threat landscape is always evolving at a faster pace as compared to organisations trying to protect themselves. Therefore, this initial procurement may protect the FBR for the immediate and medium future. However, a continued investment must be put in place to protect and allow the FBR to evolve into a data-driven digital organisation, he added.

Published in Dawn, October 1st, 2021

Opinion

Editorial

17 Jan, 2022

Security policy unveiled

PAKISTAN’S freshly unveiled National Security Policy has broadened the traditional concept and included economic...
Bold decisions
Updated 17 Jan, 2022

Bold decisions

IT is a double blow within a matter of days. The Islamabad High Court’s order last week to demolish a navy golf...
17 Jan, 2022

Rohingya camp blaze

A HUGE blaze in a refugee camp housing members of the Rohingya community in Bangladesh last week has left up to ...
16 Jan, 2022

Omicron threat

AS Pakistan grapples with the fifth coronavirus wave fuelled by the Omicron variant, the state must take timely...
Updated 16 Jan, 2022

Grim picture

There is much the govt can do to create an environment free of repression and coercion so that democracy is strengthened.
16 Jan, 2022

Larkana jail unrest

THAT Larkana Central Prison authorities had to resort to the excuse of “cleaning the jail” to shift 13 dangerous...