Shining Hope for Communities (SHOFCO), a prominent grassroots non-profit organization based in Kenya, has allegedly been compromised, resulting in the exposure of sensitive member data. A threat actor is currently selling a database containing over 129,000 records on a cybercrime forum for $500. The breached data appears to originate from the organization’s “SHOFCO SUN Welfare” program (shofcowelfare.org), a community support initiative that provides financial and social assistance to residents of informal settlements like Kibera.
According to the actor, the dataset contains 129,000+ rows of user information, including 123,000 unique phone numbers. The allegedly compromised data includes:
-
Full names (Members and Staff)
-
National ID numbers
-
Primary and secondary phone numbers
-
Dates of Birth
-
Next of Kin details (Names, ID numbers, phone numbers, and relationships)
-
Dependent details (Names, dates of birth, and relationships)
-
Registration dates and internal “Shofco ID” numbers
-
Staff email addresses (found in the “Registered By” field)
