‼️🇱🇰 Data from the Ministry of Public Administration, Home Affairs, Provincial Councils and Local Government of Sri Lanka has allegedly been breached and put up for sale on a popular cybercrime forum.
‣ Threat Actor: wh6ami
‣ Category: Data Breach / Data Sale
‣ Victim: Ministry of Public Administration, Home Affairs, Provincial Councils and Local Government
‣ Industry: Government
The threat actor, a forum moderator, claims to have breached the government portal that serves as the primary resource for public officers and the general public, providing access to official documents, the Establishments Code, Public Administration Circulars, recruitment information, and Efficiency Bar Examinations.
The leak allegedly contains:
▪️ Full names (first and last, initials)
▪️ Email addresses (personal and work)
▪️ Phone numbers (mobile, office, home)
▪️ Physical addresses (home and work)
▪️ National ID numbers (NIC)
▪️ Job titles and designations
▪️ Employer names and department details
▪️ Usernames and hashed passwords
▪️ User registration dates and last activity timestamps
▪️ Internal government circulars and service minutes (PDF files)
Samples provided include latest documents, personal data of civil servants (5,000 rows), circulars, and user data. The asking price is $200.
"Effective immediately, any Country doing business with the Islamic Republic of Iran will pay a Tariff of 25% on any and all business being done with the United States of America. This Order is final and conclusive...." - PRESIDENT DONALD J. TRUMP