Angola Government Employees Database Leaked on DarkForums

Overview

On 11 September 2025, a DarkForums user shared a database described as belonging to the Government of Angola portal pape.gov.ao. The post claims the file contains personal and functional information on Angolan government employees across multiple administrative areas. The dataset was shared as a raw text dump.

What was published

According to the forum post, the dump contains records for 245 employees. Each row includes the following fields:

• ID_Funcionario (employee identifier)
• Num_Agente (agent number)
• Nome (name)
• Data_Nasc (birth date)
• Area (administrative area)
• Funcao (job role)

The poster labelled the data "FRESH + PRIVATE" and provided a direct download. No passwords, financial data or national identity numbers are mentioned in the post.

Risks for affected individuals

• Names, birth dates and job roles can be used for targeted phishing against public servants.
• Employee identifiers may help attackers impersonate staff when contacting government services.
• The data could feed credential-stuffing attempts if employees reused work credentials elsewhere.

What remains unknown

• The exact number of affected employees beyond the 245 records described.
• How the database was obtained and when the exfiltration occurred.
• Whether additional government systems were accessed.

What affected people should do

Angolan public servants should watch for unsolicited messages referencing their job details, change passwords used for work portals, and report suspicious contact attempts to their IT security teams.