Threat Actor Claims 2.85 Million NCAG Records Exposed

Summary
A threat actor claims to have exfiltrated about 2.85 million NCAG records. A purported sample reportedly includes personal, medical, contact, and location data; the breach is not independently confirmed.
Key points
- A threat actor reportedly posted a claim and sample on a cybercrime forum, alleging exfiltration of about 2.85 million NCAG records.
- The purported data includes names, ID numbers, dates of birth, email addresses, and phone numbers.
- The sample allegedly contains medical details, including blood type, height, weight, and health status.
- Reported location fields include residence details and latitude and longitude.
- The article does not provide independent confirmation that the breach or data exfiltration occurred.
Article Details
- Victim Organization
- National Committee for the Administration of Gaza (NCAG)
- Incident Type
- Alleged data breach and database exfiltration
- Data Types Exposed
- Personally identifiable information
- ID and reference numbers
- Names
- Dates of birth
- Sex
- Medical information, including blood type, height, weight, and health status
- Occupation
- Location data, including governorate, area, street, residence, and latitude/longitude
- Email addresses
- Phone numbers
- URLs to personal photos and ID document photos
- Affected Records
- Approximately 2.85 million records, according to the threat actor's claim; the article describes the database as approximately 2.85 million lines.
- Operational Impact
- Not disclosed
- Ransom Or Extortion
- None reported
- Claim Status
- claimed
