Data Breach at the National Social Insurance Fund (NSIF) of Cameroon
Learn More
A significant data breach has been reported involving the National Social Insurance Fund (NSIF) of Cameroon, with millions of user records allegedly being sold on the dark web.
Hackers from a group named Space Bears claim responsibility, demanding a ransom by September 22, 2024, or threatening to sell the data, which they have already begun doing. The stolen data is being offered at two price points: $3,000 USD for the full set of data (25 GB) or $1,000 USD for a partial set (10 GB).
Content of the alleged stolen data:
- Information on employee and employer contributions.
- Details of social security beneficiaries, affecting over 1.5 million people.
- Financial documents and accounting reports.
- Backup data and customer databases.
- Network structure diagrams, specifically mentioning Huawei infrastructure.
- Personal data of employees and citizens, including archived insurance information.
No details are disclosed about the nature of the attack.
The claim suggests that the NSIF uses Huawei network infrastructure, but this detail has not been independently verified.
As of now, NSIF has not confirmed or denied the breach. If the breach is confirmed, it could result in significant privacy violations and potential exploitation of sensitive data for identity theft, financial fraud, or social engineering attacks.
