Cyberattack Disrupts CDA Billing System; Data Leak Threat Reported

Summary
CDA officials confirmed a cyberattack disrupted online billing for three days. Data was reportedly compromised and attackers allegedly threatened publication, while CDA spokesperson Shahid Kiani said backup records were safe and recovery was underway.
Key points
- The Capital Development Authority’s property, conservancy and water billing system was under cyberattack, disrupting online payments for three days.
- CDA officials said property and conservancy data was compromised; attackers allegedly threatened to publish it on the dark web unless a Bitcoin ransom was paid.
- CDA spokesperson Shahid Kiani said billing records remained protected in secure backups and that recovery work was underway.
- The authority’s vendor, NRTC, and CDA IT and revenue teams were working to restore the system.
- Citizens reported being unable to pay taxes online; the CDA’s main website remained accessible, but its bill-payment link could not be opened until Thursday evening.
Article Details
- Victim Organization
- Capital Development Authority (CDA)
- Incident Type
- Cyberattack involving compromised billing data and a Bitcoin ransom demand; attackers allegedly threatened to publish data if the ransom was not paid.
- Disclosure Date
- 2026-06-19
- Data Types Exposed
- Data connected to property and conservancy charges
- Operational Impact
- Online billing and payment services were disrupted for about three days. Recovery from secure backups was underway; the article reports that online payments through 1-Link or other authorised online banking channels were safe.
- Ransom Or Extortion
- Hackers demanded ransom in Bitcoin. Attackers allegedly threatened to publish the compromised data on the dark web if the ransom was not paid.
- Claim Status
- confirmed
