Breaches and incidentsBriefReported by a reputable outlet, citing the company
Senegal Directorate of File Automation (DAF): national ID and passport agency shut down after ransomware
DAF, which manages national ID cards, passports and biometric data, warned residents of a cyberattack and temporarily suspended operations.
- Disclosed
What happened
- DAF, which manages national ID cards, passports and biometric data, warned residents of a cyberattack and temporarily suspended operations; it had been disrupted for at least five days by 5 Feb and its website was still down on 9 Feb (The Record). An email from contractor IRIS Corporation Berhad said hackers breached two DAF servers on 19 Jan and stole card personalisation data from one.
- Root cause / initial access: not disclosed.
- Attacker: Green Blood Group claimed it and claimed 139 GB including citizen database records, biometric data and immigration documents (claim not confirmed). A senior police official said data “integrity” remained intact.
- Response: systems being restored; IRIS cut network connections, changed a password and isolated foreign missions.
Sources
- https://therecord.media/senegal-breach-national-id-agency
- https://konbriefing.com/en-topics/cyber-attacks-public-administration.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.