A leak may have compromised the sensitive data of Senegal’s entire population

The cybercriminal group The Green Blood published evidence on the dark web on February 5, 2026, of a breach targeting Senegal’s Department for the Automation of Records (DAF). This public institution processes highly sensitive data relating to the entire Senegalese population, including identity, biometric, electoral, and immigration-related information.

The Green Blood claims to be in possession of the DAF’s entire database, amounting to 139 TB of sensitive information. Senegalese authorities have not confirmed the scale of the compromise, but the incident is said to have led to the temporary suspension of national identity card production. An investigation is currently underway. According to ethical hacker Clément Domingo (aka “SaxX”), the release of this data “could have catastrophic consequences for the country’s national security.”

This compromise comes just a few months after a massive cyberattack against Senegal’s Directorate General of Taxes and Domains (DGID). Clément Domingo points out that the country still lacks both a national cybersecurity agency and a national CERT, and stresses that these should be established urgently. Emerging in early 2026, The Green Blood is a ransomware gang, but its geographical origin and any potential affiliations remain unknown.