Bureau of Public Enterprises scraped data leaked on DarkForums

Overview

On 20 April 2026, the DarkForums user NullsecNg posted scraped data attributed to the Bureau of Public Enterprises (BPE), the Nigerian agency in charge of privatisation and reform of state-owned enterprises. The thread describes the content as scraped data from the bureau's web presence.

What was published

The post mentions a web.config.bak file and admin configuration among the scraped material, with a download link provided. The presence of configuration files suggests technical infrastructure details may be exposed, though the exact scope was not detailed.

Risks for affected individuals

• Configuration files can reveal internal infrastructure details useful for further attacks.
• If the scrape includes application data, users of BPE systems could be affected.

What remains unknown

• Whether the leak contains personal data or only configuration files.
• How the data was obtained and whether the bureau's systems are still exposed.
• The total size and number of files in the release.

What affected people should do

The Bureau of Public Enterprises should review the exposed configuration files, rotate any credentials they reference and audit its public-facing infrastructure. Citizens should watch for phishing that references government agencies and verify any official communication independently.