Zetech University listed by the Babuk2 ransomware group

Overview

The Babuk2 ransomware group has listed Zetech University, a private university in Kenya, on its leak site. The listing appeared on 27 January 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the university. The archive is expected to include student records, academic documentation and employee information.

Risks for affected individuals

• Students' personal and academic data may be exposed.
• Staff records contain sensitive information.
• Research data could be of value.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Students and staff should monitor their accounts and be alert to phishing referencing the university. Zetech should notify affected individuals, review compromised systems, and follow Kenyan data protection requirements for breach notification.