NNPC HMO Data Breach Claim Involves 200,000 Records and $300,000 Demand
Summary
An anonymous cybercrime-forum user reportedly posted data allegedly taken from NNPC HMO, affecting about 200,000 users, and demanded $300,000 by April 30, 2026. The data reportedly includes identity, contact and insurance details.
Key points
- An anonymous user on a cybercrime forum is said to have posted a database allegedly taken from NNPC HMO.
- The database reportedly contains about 200,000 users’ records.
- The attacker allegedly demanded $300,000 by April 30, 2026, and threatened to sell the database if unpaid.
- Reported data fields include names, member numbers, employers, contact details, dates of birth, and insurance and card-status information.
- The supplied article does not provide independent confirmation of the breach or the attacker’s claims.
Article Details
- Victim Organization
- NNPC Health Maintenance Organisation Limited (NNPC HMO)
- Incident Type
- Alleged data breach and database extraction
- Data Types Exposed
- Full names
- Member numbers
- Employer details
- Sex
- Insurance plan details
- Telephone numbers
- Expiration dates
- Dates of birth
- Card statuses
- Ages
- Plan statuses
- Insurer details
- Affected Records
- Approximately 200,000 users’ records, reportedly
- Ransom Or Extortion
- An anonymous attacker reportedly demanded $300,000 by April 30, 2026, and threatened to sell the database if the demand was not met.
- Claim Status
- alleged