Actor Claims FCT-IRS Breach Involving 5 Million Records and 121,000 Users

Summary
A forum actor called Individual claims to have breached Nigeria’s FCT-IRS and advertises 87 tables, about 5 million records, 7 GB of data, and 121,000 users. The alleged dataset includes identity and tax information; the claim is unverified.
Key points
- A forum actor using the name Individual claims to sell data from a full breach of Nigeria’s Federal Capital Territory Internal Revenue Service (FCT-IRS).
- The listing advertises 87 database tables and about 5 million records, totaling 7 GB and associated with 121,000 users.
- The allegedly exposed information includes emails, hashed passwords, OAuth tokens, tax profiles, signatures, and verification images.
- The breach claim and dataset details are unverified.
- The article says no initial access method was disclosed.
Article Details
- Victim Organization
- Federal Capital Territory Internal Revenue Service (FCT-IRS)
- Incident Type
- Unverified full-breach claim involving alleged data theft
- Data Types Exposed
- Emails
- Hashed passwords
- OAuth tokens
- Tax profiles
- Signatures
- Verification images
- Taxpayer and identity information
- Affected Records
- Approximately 5 million records claimed
- Affected Data Size
- 7 GB claimed
- Operational Impact
- No operational impact reported.
- Ransom Or Extortion
- A forum listing reportedly offered the alleged breach data for sale; the claim is unverified.
- Claim Status
- claimed
