CDA Billing System Hacked

• Unknown hackers breached the Capital Development Authority (CDA) property, conservancy and water billing system in Islamabad and demanded a ransom in Bitcoin, reported on 19 June 2026.
• The online "Pay your bills online" service was down for three consecutive days, during the fiscal-closing month when residents settle property and tax dues. The main CDA website stayed up.
• CDA spokesperson Shahid Kiani says the attack hit billing for property, conservancy and water charges, but backup data is secure, consumer funds are safe through authorised banking channels, and recovery teams from the revenue directorate, the IT department and the vendor NRTC are restoring service.
• A CDA IT official, quoted in reporting, says the authority and NRTC failed to keep system backups for the previous six months — a direct contradiction of the official line.
• It is not disclosed how much ransom was demanded, whether it will be paid, or whether the stolen records have been published on the dark web.
• This is the second major breach since 2024, when Indian hackers put CDA data on the dark web, after which the board authorised external cybersecurity contracts.

Everyone agrees on the basics: the billing system went down for three days in the fiscal-closing month, a Bitcoin ransom was demanded, and residents could not pay online. The fight is over the backups. The CDA says its duplicate records are safe and nothing is lost. An official inside the same organisation says no backups were kept for six months. Both cannot be fully true, and which one is becomes the whole story: a clean recovery, or a basic failure being smoothed over. The louder voice right now is the official reassurance. What it leaves out is who is accountable for a public revenue system being breached twice in two years, whether the ransom will be paid, and whether the property and water records of Islamabad residents are already on the dark web.