Twaweza listed by the Nightspire ransomware group

Overview

The Nightspire ransomware group has listed Twaweza, a Tanzanian civil society organisation focused on citizen agency and social change, on its leak site. The listing appeared on 4 July 2025.

What was published

The group has listed the organisation as a victim but has not published detailed data descriptions at this stage. Civil society organisations hold programme data, beneficiary records and corporate information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Beneficiaries' personal data may be exposed.
• Programme data could be misused.
• Staff information may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

The organisation should coordinate with Tanzanian authorities, review affected systems, and inform staff and partners. Partners should be alert to phishing referencing the organisation.