Kuwait’s Ministry of Electricity & Water Allegedly Breached – 21K Employee Records for Sale

A threat actor has allegedly breached the systems of Kuwait’s Ministry of Electricity & Water (MEW), a critical government body responsible for providing electricity and water services to the nation. The actor announced the sale of a database on a cybercrime forum, claiming it contains sensitive records for over 21,000 ministry employees. The alleged breach highlights a significant security risk to the personal information of government workers and the operational security of a key national infrastructure entity.

The compromised data, which is being sold for $400, allegedly includes a range of personally identifiable information (PII) and technical details. According to the threat actor’s post, the leak contains 21,011 employee records originating from the ministry’s official domain, mew.gov.kw. The exposed information purportedly includes:

• Employee names (in Arabic) and phone numbers
• Work locations, such as the Main Ministry Building
• Device information, including OS versions and models (e.g., iPhone/Samsung)
• Registration statuses and timestamps