Namibia’s state-owned telecom company has suffered a ransomware attack, leading to the leak of sensitive customer data, including information about high-ranking government officials.
The company stated that the data was released after they refused to engage with a group of hackers known as Hunters International.
Chief executive at Telecom Namibia Stanley Shanapinda said: “We know the sums they’re asking for are exorbitant and unaffordable, so there’s no reason to even consider discussing it. And even if you do pay a ransom, there’s no guarantee the information won’t still be leaked,”
What is ransomware?
Ransomware is malicious computer software that locks up data and devices until a ransom is paid.
Just like this case, ransomware hackers typically ramp up pressure for the victims to transfer funds, usually in cryptocurrency to an anonymous digital wallet. A deadline for the money transfer will be set, threatening to leak sensitive data if it’s not met.
This is what caused the harm to the company after refusing to negotiate.
Also read: What you need to know about National Bureau of Statistics (NBS) website hack
Impact of the attack
In a statement on Monday, the company said that it only discovered last Friday that some of its customers’ data had been leaked onto the dark web.
The dark web is a portion of the internet not accessible with common browsers but with special tools. Africa has been listed on the dark web numerous times and the statistics show it.
Another report from a local media stated that the hackers stole nearly 500,000 pieces of information including personal and financial data belonging to ministries, senior government officials, and other company clients.
Sensitive customer records, including personal identification details, addresses, and banking information are said to have leaked and shared on social media.
Also read: Cybercriminals Steal $17 Million from the Central Bank of Uganda
The way forward
Telecom Namibia has warned that people should not share any of the leaked information as it is described as a criminal offence.
According to Mr. Shanapinda, “We caution that anyone that uses and/or circulates any personal information that has been leaked will be committing a criminal offense,”
The company has also urged customers to change passwords on their devices and avoid making money transfers in suspicious circumstances.
Source: BCC