ransomware
Credible
Nigeria (NG)
government
Ekiti State Government listed by the FunkSec ransomware group
Ekiti State Government
CompanyEkiti State Government
Domainekitistate.gov.ng
CountryNigeria (NG)
Sectorgovernment
Breach date2024-12-15
People affected500,000
Ransomware groupfunksec
Data typesadministrative data, citizen records, employee information
Overview
The FunkSec ransomware group has listed Ekiti State Government (ekitistate.gov.ng), the state government portal of Ekiti State, Nigeria, on its leak site. The portal provides information on government services and departments. The listing appeared on 15 December 2024. At the time of analysis, the group's leak page was not reachable.
What was published
The group claims to have exfiltrated data from the state portal. The archive is expected to include administrative data, citizen records and employee information.
Risks for affected individuals
- Citizens' personal data may be exposed.
- Administrative records could be misused.
- Employees' information may be included.
What remains unknown
- The volume of data exfiltrated.
- The exact contents of the leak.
- Whether the data has been published elsewhere.
What affected people should do
The state government should coordinate with Nigerian cybersecurity authorities, review affected systems, and inform the public if citizen data is involved. Citizens should be alert to phishing referencing state services.
Sources
- http://7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion/Breach44.html