ANADER Cote d'Ivoire: full user database dumped

<p>On 13 December 2025, a forum user published to have obtained access to data belonging to <strong>ANADER (Cote d'Ivoire)</strong>, Côte d'Ivoire on a hacking forum. The claimed data includes user credentials, password hashes, emails. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>An actor called Ahlul Sahara claims a full database dump of ANADER, the Ivorian rural development agency, including users, internal contacts and regional mapping.</p> <h2>Risks</h2> <ul> <li>Targeted phishing campaigns using compromised email addresses to distribute malware or harvest credentials from employees and customers</li> <li>Credential stuffing and account takeover attacks if password hashes are cracked and reused across multiple services</li> <li>Identity theft and impersonation using exposed personal identification documents and biometric data</li> <li>National security implications if citizen identity data, passport records, or government operations were exposed</li> <li>Diplomatic embarrassment and erosion of public trust in government digital infrastructure</li> <li>Foreign intelligence exploitation if sensitive diplomatic or defence-related communications were among the compromised data</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that ANADER (Cote d'Ivoire)'s data has been compromised and is circulating on underground forums. Government entities handling citizen data must maintain the highest standards of data protection. Citizens whose data may have been affected should monitor official communications from ANADER (Cote d'Ivoire) and remain vigilant against unsolicited communications.</p>