ransomware Credible Nigeria (NG) government

LNRBDA (Niger State) listed by the GDLockerSec ransomware group

LNRBDA (Niger State)

📅 24 January 2025
CompanyLNRBDA (Niger State)
CountryNigeria (NG)
Sectorgovernment
Breach date2025-01-24
People affected500,000
Ransomware groupGDLockerSec
Data typesadministrative data, land records, employee information

Overview

The GDLockerSec ransomware group has listed LNRBDA (lnrbda.gov.ng), a state agency in Niger State, Nigeria, on its leak site. The group's post references a data size of 5 MB. The listing appeared on 24 January 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated approximately 5 MB from the agency. The archive is expected to include administrative data and employee information.

Risks for affected individuals

  • Administrative records could be misused.
  • Employees' personal data may be exposed.
  • Land or regulatory records may be included.

What remains unknown

  • The composition of the 5 MB archive.
  • The exact contents of the leak.
  • Whether the data has been published elsewhere.

What affected people should do

The agency should coordinate with Nigerian cybersecurity authorities, review affected systems, and inform staff. Public servants should be alert to phishing referencing the agency.

Sources

  • http://igziys7pres4644kbrtakxfbrwkyld64nxk5prpkgtcexwrrjgtfjzyd.onion/274bddb7-1ae9-48d1-b5d1-370e4a308575/