Threat Actor Claims Breach of Tanzania’s BRELA Database Exposed 10.2 Million Records
Summary
Threat actor Spirigatito claims it breached Tanzania’s BRELA systems and exfiltrated 10.2 million records, including data on about 8 million individuals, which it is offering through a marketplace.
Key points
- Spirigatito claims the breach occurred on February 4, 2026; the supplied content provides no independent confirmation.
- The actor claims the data includes six databases covering business names, companies, shareholders, individuals, tax identifiers and parliamentary records.
- The claimed datasets include 7.4 million TRA Tax Identification Numbers and 2.2 million individual contact records.
- The actor is reportedly offering the data in CSV and JSON formats through a marketplace with crypto-based credits.
Article Details
- Victim Organization
- BRELA
- Victim Domain
- Unknown
- Incident Type
- Alleged government-database breach and data exfiltration
- Incident Date
- 2026-02-04
- Data Types Exposed
- Tax Identification Numbers (TINs)
- Individual contact records
- Business-name and company records
- Corporate shareholder and ownership details
- Parliamentary records
- Affected Records
- The actor claims 10.2 million records were taken, including data on approximately 8 million individuals; the claimed data includes 7.4 million TRA TINs and 2.2 million individual contact records.
- Affected Data Size
- Unknown
- Operational Impact
- Unknown
- Ransom Or Extortion
- Spirigatito claims to be selling the allegedly stolen data through a custom marketplace for crypto credits; no ransom demand is described.
- Claim Status
- claimed