Nullsec Nigeria, a threat actor, has claimed responsibility for leaking the identities of operatives and sensitive internal data linked to the Economic and Financial Crimes Commission (EFCC).
The leak raises fresh concerns over cybersecurity vulnerabilities within Nigerian public institutions and safety the agency’s operatives.
The breach surfaced on April 21 on a dark web forum, where a user identified as “ki4t,” reportedly affiliated with the group, published details of the dataset.
The exposed data is said to include agent names, phone numbers, operational code names, and password hashes tied to EFCC personnel.
The breach allegation comes amid growing concerns over cyber risks facing government agencies, following a recent reported compromise involving the Corporate Affairs Commission (CAC).
Cybersecurity analysts say that if confirmed, the exposure of such sensitive operational data could pose risks to both personnel security and ongoing enforcement operations, particularly if password hashes are successfully decrypted or linked to other compromised systems.
The development adds to increasing pressure on public institutions to strengthen digital infrastructure, access controls, and internal cybersecurity protocols as threat actors continue to target government databases.
Authorities are yet to confirm the extent of the alleged breach or whether any mitigation measures have been activated.
Nigeria has lately experienced a growing activities of hacktivists defacing websites and leaking data.
