College of Business Education (CBE) listed by the Hellcat ransomware group

Overview

The Hellcat ransomware group has listed the College of Business Education (CBE) of Tanzania on its leak site. The group states that over 500,000 records from the college were released, containing student names, phone numbers, emails and additional data including possible billing information. The listing appeared on 4 November 2024.

What was published

The group states that more than 500,000 records were released, including:

• Student names
• Phone numbers
• Email addresses
• Additional data, including possible billing information

Risks for affected individuals

• Students' personal data may be exposed.
• Phone numbers and emails enable phishing and fraud.
• Billing information is sensitive.

What remains unknown

• Whether the full dataset is publicly available.
• The exact composition of the records.
• The response status of the college.

What affected people should do

Students should monitor their accounts, change passwords and be alert to phishing referencing the college. CBE should notify affected students and authorities, review compromised systems, and provide clear guidance.