eif.org.na listed by the lockbit3 ransomware group

Overview

On 2 February 2024, the LockBit 3.0 ransomware group listed the Environmental Investment Fund of Namibia (EIF) on its leak site. EIF is a fund created by an Act of the Namibian Parliament in 2001 to support projects and communities working on environmental sustainability and climate resilience.

What was published

The LockBit 3.0 listing for EIF did not include a record count or a data inventory. LockBit's posts describe the victim and threaten to release files after a timer. No data sample associated with EIF was observed on the leak site during analysis.

Risks for affected individuals

EIF staff, project partners and grant recipients could be affected if personnel records, project documentation or financial data were exfiltrated. Such information can be used for phishing, grant fraud and impersonation of the fund's officials.

What remains unknown

The categories and volume of stolen data, and whether LockBit released any files, are not confirmed. EIF has not published a statement detailing the incident.

What affected people should do

Grant recipients and partners should verify communications from the fund through official channels and report suspicious messages. Employees should change passwords, enable multi-factor authentication, and monitor for unauthorised access to fund systems.