Cran calls for responsible handling of NAC data leakage

The Communication Regulatory Authority of Namibia (Cran) has called for information related to the Namibia Airports Company (NAC) data leak incident to be handled responsibly.

“It is important that information related to this incident is handled responsibly. The circulation of unverified or compromised data may unintentionally place individuals and organisations at further risk,” Cran spokesperson Mufaro Nesongano says in a press statement released on Sunday.

He adds that the regulatory authority would continue to share updated, verified information as it becomes available.

The NAC was attacked by a cybercriminal group called Inc Ransomware Group on 19 March.

The group says it had accessed 500GB of data. NAC confirmed on Saturday that its data had been leaked to the dark web.

The Namibia Cyber Security Incident Response Team (Nam-CSIRT) – housed under Cran – has confirmed that data leaked include financial records, internal reports and engineering and project documents.

“Verification processes remain ongoing to determine the full scope and to establish whether any sensitive or personal information has been affected,” Nam-CSIRT says.

However, the NAC maintains that its operations have not been affected.

The cybersecurity response team says it was working together with cybersecurity experts and other stakeholders to investigate the data leaked and to put in place stronger security measures.

In an age of information overload, Sunrise is The Namibian’s morning briefing, delivered at 6h00 from Monday to Friday. It offers a curated rundown of the most important stories from the past 24 hours – occasionally with a light, witty touch. It’s an essential way to stay informed. Subscribe and join our newsletter community.