Ghana Postal Service Allegedly Breached – Database and System Access for Sale

Ghana Postal Service, the national postal operator of Ghana, has allegedly fallen victim to a significant data breach. A threat actor has advertised the sale of what they claim is webshell access to the company’s servers and a full backup of its database. As the country’s official postal service, the organization is critical to national infrastructure, handling mail, parcels, and logistics for millions of citizens and businesses, which involves processing a vast amount of personal and sensitive information.

The alleged breach was announced on a dark web forum where the seller is asking for $6,000 in exchange for the compromised assets. The threat actor claims the stolen database contains a wealth of sensitive information. If the actor’s claims are accurate, the exposed data could lead to widespread fraud, identity theft, and other malicious activities targeting customers of the postal service.

The data allegedly included in the sale consists of:

• Tracking information
• Payment information
• Other unspecified sensitive information