ransomware Credible Kenya (KE) education

Zetech University listed by the FunkSec ransomware group

Zetech University

📅 14 December 2024
CompanyZetech University
CountryKenya (KE)
Sectoreducation
Breach date2024-12-14
People affected150,000
Ransomware groupfunksec
Data typesstudent data, academic records, employee information

Overview

The FunkSec ransomware group has listed Zetech University, a private university in Kenya, on its leak site. This listing, dated 14 December 2024, is a separate incident from the Babuk2 claim of January 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the university. The archive is expected to include student records, academic documentation and employee information.

Risks for affected individuals

  • Students' personal and academic data may be exposed.
  • Staff records contain sensitive information.
  • Research data could be of value.

What remains unknown

  • The volume of data exfiltrated.
  • The exact contents of the leak.
  • Whether the data has been published elsewhere.

What affected people should do

Students and staff should monitor their accounts and be alert to phishing referencing the university. Zetech should notify affected individuals, review compromised systems, and follow Kenyan data protection requirements for breach notification.

Sources

  • http://7ixfdvqb4eaju5lzj4gg76kwlrxg4ugqpuog5oqkkmgfyn33h527oyyd.onion/sell10.html