ransomware
Credible
Senegal (SN)
government
Direction Generale des Impots et Domaines (DGID) listed by the BlackShrantac ransomware group
Direction Generale des Impots et Domaines (DGID)
CompanyDirection Generale des Impots et Domaines (DGID)
Domaindgid.sn
CountrySenegal (SN)
Sectorgovernment
Breach date2025-09-29
People affected500,000
Ransomware groupblackshrantac
Data typestax records, administrative data, employee information
Overview
The BlackShrantac ransomware group has listed the Direction Générale des Impôts et Domaines (DGID), Senegal's tax and estates authority, on its leak site. The authority administers taxation and state property. The listing appeared on 29 September 2025. At the time of analysis, the group's leak page was not reachable.
What was published
The group claims to have exfiltrated data from the tax authority. The archive is expected to include tax records, administrative documentation and employee information.
Risks for affected individuals
- Taxpayer data may be exposed.
- Administrative records are sensitive.
- Employees' information may be included.
What remains unknown
- The volume of data exfiltrated.
- The exact contents of the leak.
- Whether the data has been published elsewhere.
What affected people should do
The authority should coordinate with Senegalese cybersecurity authorities, review affected systems, and inform the public if taxpayer data is involved. Taxpayers should be alert to tax-themed phishing.
Sources
- http://b2ykcy2gcug4gnccm6hnrb5xapnresmyjjqgvhafaypppwgo4feixwyd.onion/targets/4