Mostafa Mahmoud Association: 34,543 lines of donor data leaked

<p>On 03 July 2025, KALOSHA319 published to have obtained access to data belonging to <strong>Mostafa Mahmoud Association (Egypt)</strong>, Egypt on a hacking forum. The claimed dataset contains approximately <strong>34,543</strong> records. A limited sample was published to support the claim.</p> <h2>What the source reveals</h2> <p>The official website of the Egyptian Mostafa Mahmoud Association was hacked, and donor data was stolen. The data is divided into eight files ====================================================================================================== donation.csv containing 23,719 lines of data donation Fawry Pay.csv 158 lines medical Devices Donate With CIB Bank.csv 1,445 lines medical Devices Donate With Fawry Pay.csv 141 lines new donation share form 4,213 lines new_donation_share_form_Fawry.csv 1,426 lines new_donation_share_form_NBE_Bank.csv 2,974 lines sacrifice Donate With CIB Bank.csv 467 lin</p> <h2>Risks</h2> <ul> <li>National security implications if citizen identity data, passport records, or government operations were exposed</li> <li>Diplomatic embarrassment and erosion of public trust in government digital infrastructure</li> <li>Foreign intelligence exploitation if sensitive diplomatic or defence-related communications were among the compromised data</li> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that Mostafa Mahmoud Association (Egypt)'s data has been compromised and is circulating on underground forums. Government entities handling citizen data must maintain the highest standards of data protection. Citizens whose data may have been affected should monitor official communications from Mostafa Mahmoud Association (Egypt) and remain vigilant against unsolicited communications.</p>