NBP reports cyberattack on its servers

Customer and financial data of bank remains safe

KARACHI:

The state-owned National Bank of Pakistan (NBP) on Saturday came under a cyberattack, which affected its branches in providing some of the services to the customers. However, the customers' deposits and data have so far remained safe.

"Currently, the NBP's services to its customers are disrupted, but we are working to address the breach and remain confident that essential customer services will be restored by Monday morning,” NBP said in a statement issued in connection with the cyberattack.

"The NBP has reported a cyber security-related incident which is being investigated,” stated the State Bank of Pakistan in a tweet. “NBP has not observed any data breach or financial loss. No other bank has reported any such incidence."

Read more: FBR reels under a major ‘cyberattack’

The SBP is monitoring the situation closely to ensure safety and soundness of the banking system, the central bank said.

The NBP confirmed that in between October 29 and 30, a cyberattack was detected on the NBP's servers which impacted some of its services.

Immediate steps were taken to isolate the affected systems, the statement read.

"At this point, no customer or financial data has been compromised."

The bank stressed that remediation efforts were under way by using experts as well as international resources, wherever required.

Also read: Major cyber attack by Indian intelligence identified: ISPR

"We are grateful for the understanding of our customers in this unusual situation and remain committed to the safety of their trust that they repose in the NBP," according to the bank’s statement.

NBP President Arif Usmani, while talking to a private TV channel said, "The mainframe computer [servers] of the bank have totally remained unaffected from the cyberattack and personal computers have been disconnected from the mainframe as they are infected.

"Some 40-50 foreign as well as local experts are working to disinfect the system as we speak."

He said three highly professional companies including Microsoft are engaged to make the bank fully functional by Monday morning.

"We are aimed at making the bank work by Monday morning. We, on behalf of the government, start disbursing salaries from first day of every month and Monday is November 1. We have to make the bank work by Monday morning," he said.

"This attack is similar to the one encountered by the FBR (Federal Board of Revenue)," he said.

The FBR faced a cyberattack about two-and-half-month ago. It took it almost two weeks to fully recover from the attack.