StormFiber website briefly hacked

No customer payment data compromised as website stores limited public, static content, says internet service provider

The website of StormFiber, one of the leading internet service providers in Pakistan, was hacked briefly on Wednesday.

"This morning, our website https://www.stormfiber.com was attacked by foreign hackers and the home page was changed. No customer payment data was compromised as the website stores limited public, static content," an official statement issued by the company said.

In any case, the statement added, the company took down the website to sanitise it and patch the vulnerability before bringing it up. "As a side, our new website built on latest technology and infrastructure has also completed development and will be deployed next month. It was undergoing testing when this unfortunate incident on our existing website took place."

Update on our website pic.twitter.com/W4SVU6wmZl

— StormFiber (@StormFiber) August 3, 2022

For payments, the leading internet service provider (ISPR) said, users log on to use an external Internet Payment Gateway (IPG) where users are asked to enter their card numbers each time they make their payment.

Read more: StormFiber expands to Multan even as taxes bite

"We do this as we store no payment data at the time of processing the payment. We are in the process of enabling tokenisation to save card numbers securely, however, until this is enabled, reentering card details each time without saving them is the most secure method."

We apologise for the disruption and inconvenience caused, it added.