LowII Cyber Warfare & Critical Infrastructure3 November 2026, Tuesday
Pakistan's National CERT reports more than 1,000 cyberattacks this year
Haider Abbas, director general of Pakistan's National CERT, told the National Assembly Standing Committee on Information Technology that the country has faced more than 1,000 cyberattacks in 2026. About 3 months earlier the same official had put the year's count at over 400.
According to PhoneWorld and TechJuice, the National CERT runs a security monitoring centre with 70 staff; about 30% of monitoring relies on AI agents and 70% on people. Committee members asked whether 30% AI monitoring might create new vulnerabilities and whether the country could respond effectively to a major attack. The exact date of the meeting could not be verified; the reports were published on 3 November.
The limits of the figures are clear: how many of the 1,000 were blocked, how many led to breaches and which institutions were affected was not disclosed. According to a CSO Pakistan report from about 3 months earlier, Abbas said at the time that all of the more than 400 attacks had been blocked and that some were state-backed. Committee chairman Syed Aminul Haque noted that attacks rise around national days such as 14 August and 6 September.
The insurance constraint: Abbas's July finding of state-backed attacks should be read alongside the state-backed attack exclusion Lloyd's has required since 31 March 2023. That exclusion can be triggered when attribution comes from the affected country's government. There is no source showing that any formally attributed attack in Pakistan turned into a policy dispute in 2026. The Information Security Framework rules approved in 2023 require annual cyber audits of public bodies.
Talay assessment
Bottom line
A rise from 400 to more than 1,000 in about 3 months indicates a change either in the tempo of attacks or in the counting method; with no breach count disclosed, the two cannot be separated. For a 70-person centre doing 70% of its monitoring by hand, the load is straining capacity. While tension with India persists, claims of state-backed attacks like those in July could feed a debate over cover beyond 2026.
Likely effects
- Public cyber capacityNegative1–6 months
With 70 staff and 70% manual monitoring, detection times risk lengthening as attack numbers rise.
- Cyber insuranceNegative6 months+
Statements about state-backed attacks bring the exclusion clause to the fore in the policies of Pakistani institutions.
- Digital governanceUncertain1–6 months
Annual audits and Pakistan Digital Authority standards impose compliance costs on public bodies.
Possibilities, ranked
- 1The count rises, no detail follows60%
The National CERT issues a new total but discloses no detail on breaches or institutions.
Watch: The National CERT's year-end report and parliamentary briefings
- 2A major breach is disclosed25%
A data leak or outage at a public body is officially confirmed.
Watch: The pkcert.gov.pk advisory list and institutional statements
- 3A new authority is created15%
Legislation moves forward for a National Cyber Security Authority reporting to the prime minister.
Watch: The federal cabinet agenda and the parliamentary bill register
Probabilities are calibrated judgement based on the sources, not measurement, and are revised as new information arrives. Not investment advice.
Market reaction
Indicators affected
- Cyberattacks in 2026▼ 1,000+
- National CERT staff▼ 70
Sources
- PhoneWorld — Pakistan Faces Over 1,000 Cyberattacks in 2026 as National CERT Reveals AI-Based Security Monitoring (3 November 2026)
- TechJuice — Pakistan Records Over 1,000 Cyberattacks in 2026, National CERT Reveals (November 2026)
- CSO Pakistan — National CERT Reports More Than 400 Cyberattacks Blocked Across Pakistan In 2026
- Clifford Chance — Lloyd's cyber war exclusion (September 2023)