The Papua New Guinea Internal Revenue Commission (IRC) has confirmed that its tax administration platform, SIGTAS, is back online and functioning steadily following a recent cyberattack. However, concerns linger about potential unauthorized access to sensitive internal data during the breach.
According to IRC officials, the system was brought back into operation last Thursday, though its performance continues to fall short of optimal levels. While the platform is currently experiencing delays, authorities are optimistic that its functionality will improve incrementally over time.
 |
| Papua New Guinea’s Tax Authority Recovers from Cyberattack, System Restored but Challenges Remain [Graphics AI] |
The disruption, which began on January 28, lasted nearly two weeks, causing significant challenges for the commission. Despite this setback, the IRC has assured the public that taxpayer information remained protected within SIGTAS, thanks to the system’s multi-layered security architecture.
Commissioner General Sam Koim revealed that the cyberattack targeted the encryption mechanisms of virtual servers, with unauthorized actors attempting to exploit vulnerabilities. He emphasized that the IRC refused to entertain ransom demands, opting instead for a structured recovery process bolstered by enhanced cybersecurity measures.
Koim also reassured external stakeholders and partners connected to the IRC’s systems that their operations were unaffected. Secure data exchanges, financial transactions, and communications with third-party platforms continued without interruption throughout the incident.
In response to the breach, the IRC engaged KPMG to conduct a comprehensive forensic audit and assist in restoring normalcy. Koim reiterated that safeguarding taxpayer and operational data was the commission’s top priority during the crisis.
As the IRC works to stabilize SIGTAS fully, efforts are underway to strengthen defenses against future threats, ensuring greater resilience in the face of evolving cyber risks.
Also read