Mauritania: multiple banks claimed breached

Overview

On May 15, 2025, DarkForums user kill9 claimed the breach of multiple financial institutions in Mauritania. The post names six banks: Banque Al-Wava Mauritanienne Islamique (BAMIS), Banque Mauritanienne pour le Commerce International, Banque pour le Commerce et l'Industrie (BCI), Orabank Mauritanie, Banque Islamique de Mauritanie (BIM) and General Bank of Mauritania (GBM).

What was published

The post includes sample client records with:

• Client names
• Account amounts in Mauritanian ouguiya
• Client IDs (partially masked)
• Passwords (partially masked)

The samples appear to be drawn from banking systems, with masked characters limiting direct misuse of the published preview.

Risks for affected individuals

Mauritanian bank clients could be at risk if their account details were exfiltrated. Even partially masked credentials indicate real account access, and combined with names they enable targeted phishing and social engineering.

What remains unknown

• The named banks have not publicly commented
• The full dataset was not published in the thread
• The extent of the claimed breach is not verified

What affected people should do

Mauritanian bank customers should be alert to phishing calls or messages referencing their bank and account details. Contacting their bank directly about the claim and monitoring account statements is recommended.