Cour des Comptes du Senegal listed by the Krybit ransomware group

Overview

The Krybit ransomware group has listed the Cour des Comptes du Sénégal (Court of Auditors of Senegal), the independent supreme audit institution of the country, on its leak site. The listing appeared on 17 June 2026.

What was published

The group claims to have accessed the institution's systems and copied data. As a public audit body, the court holds financial control records, audit documentation and internal administrative data, which are the likely contents of any exfiltration.

Risks for affected individuals

• Public sector employees' records may be exposed.
• Audit documentation is sensitive from an institutional perspective.
• Financial data could be used for disinformation or fraud.

What remains unknown

• The volume of data exfiltrated.
• Whether the release is scheduled.
• The attack vector used.

What affected people should do

The Court of Auditors should coordinate with Senegal's cybersecurity authorities, review the affected systems, and inform staff and institutions whose data may be involved. Public servants should remain alert to phishing referencing the institution.