Telecom Namibia listed on Hunters International leak site

• Ransomware group: Hunters
• Country: Namibia
• Sector: Professional Services
• Announcement date: December 10, 2024

The Hunters International ransomware group has listed Telecom Namibia on its leak site, claiming to have exfiltrated data from the organization. This announcement, made on December 10, 2024, follows an alleged attack that took place on November 21, 2024. The listing indicates a potential data breach involving a significant volume of information belonging to the telecommunications provider.

Details of the alleged attack

According to the claims made by the Hunters International group, the incident involved the exfiltration of data rather than the encryption of systems. In many modern ransomware campaigns, threat actors employ a technique known as double extortion. In this scenario, attackers do not merely lock a victim's files to demand a ransom for decryption; they also steal sensitive information to threaten its public release if the ransom is not paid. This approach increases the pressure on the target organization, shifting the focus from operational downtime to the severe consequences of a data leak.

The threat actors claim that the breach occurred on November 21, 2024, and they officially announced the addition of Telecom Namibia to their leak site on December 10, 2024. While the listing confirms that the organization's systems were not encrypted during this specific event, the claim of data exfiltration suggests that the attackers successfully bypassed security perimeters to access and remove internal files.

Information involved in the claim

The group has provided specific metrics regarding the volume of the alleged theft, though they have not provided a detailed breakdown of the specific content contained within the files. The claims regarding the exfiltrated data include the following:

• Total data size: 626.3 GB
• Total file count: 492,633 files

The listing names no specific data types or categories of information that were allegedly stolen.

About Telecom Namibia

Telecom Namibia is the state-owned primary telecommunications provider in Namibia. The company offers fixed-line, mobile communication, and internet services throughout the country. As a primary provider of essential communication infrastructure, the organization plays a critical role in the nation's connectivity and digital services.

Risk assessment and implications

This claim by the Hunters International group may pose a risk to data privacy rather than the organization's operational continuity. Because the attack focuses on exfiltration, the primary threat is the exposure of sensitive information. Depending on the nature of the exfiltrated data, secondary risks such as identity theft or targeted phishing attacks against employees and customers may be observed. If the stolen data contains personal identifiers, it could be used by malicious actors to conduct highly convincing social engineering campaigns.

Furthermore, the organization may face legal obligations under Namibia's data protection regulations. Organizations in the telecommunications sector must adhere to strict regulatory frameworks to protect consumer privacy and maintain public trust. The potential for legal scrutiny and regulatory fines is a significant consequence of such incidents.

There is also a possibility that the exfiltrated data could be shared or sold on various platforms in the future. This risk is heightened by the group's alleged connection to the Hive ransomware. Public information about the Hunters International group remains limited, making it difficult to predict their long-term behavior or the ultimate fate of the stolen data. For organizations in the professional services and telecommunications sectors, maintaining robust data loss prevention measures and strict access controls is essential to mitigate the risks of unauthorized data exfiltration.