[JUST IN]: EFCC IN TROUBLE AS HACKERS EXPOSES SENSITIVE DOCUMENTS

Also Read

 

Nigeria’s Economic and Financial Crimes Commission (EFCC) has reportedly suffered a major cyberattack, with threat actors operating under the name “Nullsec Nigeria” leaking sensitive internal data linked to the agency.

The breach came to light on April 21 after details surfaced on a dark web forum. A user identified as “ki4t,” allegedly affiliated with the group, published information about the compromised dataset.

According to security analysts, the exposed data includes names of EFCC agents, phone numbers, operational code names, and password hashes associated with personnel. Experts warn that the presence of password hashes significantly heightens the risk of credential compromise, unauthorized system access, and potential impersonation of operatives.

The development has raised serious concerns over the safety of EFCC officials and their families, as well as the integrity of ongoing investigations. Analysts note that such a breach could undermine public confidence in Nigeria’s anti-corruption efforts and disrupt critical law enforcement operations.

Observers describe the direct targeting of a law enforcement database as a worrying escalation with potential national security implications.

This incident comes shortly after a similar breach involving the Corporate Affairs Commission (CAC), which confirmed unauthorized access to its systems earlier in April 2026. The attack reportedly exposed sensitive corporate registration data, with threat actors claiming to have extracted millions of company records.

Following the CAC breach, authorities launched a security review, while the Nigeria Data Protection Commission opened an investigation under the Nigeria Data Protection Act.

Combined, the EFCC and CAC incidents suggest a growing wave of cyberattacks targeting critical institutions in Nigeria. Cybersecurity experts believe attackers may be deploying tactics such as phishing, database exploitation, and data scraping to gain access to high-value information.

“Nullsec Nigeria” is suspected to be a loosely coordinated threat group or alias linked to multiple recent breaches, although its structure and motives remain unclear.

As pressure mounts, attention is now focused on regulators and security agencies to strengthen cyber defenses and prevent further compromises of sensitive national systems.