Namibia Airports Company’s stolen data released on dark web

The Namibia Airports Company (NAC) has confirmed that data stolen during a recent cyberattack on the company has been released on the dark web.

NAC spokesperson Dan Kamati in a press statement on Saturday says preliminary investigations have revealed that the data exposed includes airport permit system files, parking management databases, engineering and project documents, financial records, and certain internal reports.

Investigations into the attack last week confirmed INC Ransom Group, a worldwide cybercriminal organisation, was responsible for the attack.

The group has claimed to have exfiltrated about 500GB of data and said it was going to disclose the information once a timer lapses.

“The NAC is actively verifying the scope of this exposure to establish whether sensitive or personal information has been compromised.

“Immediate containment measures were implemented following the incident, and additional safeguards have been deployed to strengthen our defences,” he says.

Kamati says operations across all its facilities remain fully functional despite the release of its data on the dark web and that the airport’s safety and security remains unaffected.

The NAC says accountability, resilience, and stakeholders remain a priority.

The company will provide further information once it becomes available, it says.

INC Ransomware Group is a highly active and sophisticated cybercriminal organisation responsible for numerous attacks worldwide, across both public and private sectors.

It employs double-extortion tactics, combining data theft with the encryption of critical information to increase pressure on victims.

In an age of information overload, Sunrise is The Namibian’s morning briefing, delivered at 6h00 from Monday to Friday. It offers a curated rundown of the most important stories from the past 24 hours – occasionally with a light, witty touch. It’s an essential way to stay informed. Subscribe and join our newsletter community.