Safaricom-Backed M-TIBA Victim of a Possible Data Breach Affecting Millions of Kenyans

Safaricom-backed M-TIBA has been named by DataBreaches[.]Net as the victim of a possible data breach that could affect millions of Kenyans. According to DataBreaches[.]Net, the alleged breach involves over 2.15 terabytes of information and could expose records of up to 4.8 million users, making it one of Kenya’s largest leaks. A threat actor known as “Kazu” announced the breach on dark web forums, advertising the stolen database and sharing a 2GB sample file as proof.

The sample reportedly contains details of more than 114,000 users, including both account holders and beneficiaries. Leaked information is said to include full names, national ID numbers, phone contacts, dates of birth, medical diagnoses and billing records, along with data from about 700 health facilities, with DataBreaches noting the government is aware and presumably investigating.