National Mining Corporation (NAMICO) listed by the Tengu ransomware group

Overview

The Tengu ransomware group has listed the National Mining Corporation (NAMICO), a Kenyan state corporation created under the Kenya Mining Act 2016, on its leak site. The corporation is the government's investment arm in the mining and minerals sector. The listing appeared on 26 January 2026. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated corporate data from the corporation. The archive is expected to include operational records, investment documentation and employee information.

Risks for affected individuals

• Employees' personal records may be exposed.
• Operational and investment data could be sensitive.
• Corporate information may be misused.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

The corporation should coordinate with Kenyan cybersecurity authorities, review affected systems, and inform staff. Employees should be alert to phishing referencing the corporation.