> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Alleged Breach of Tanzania's BRELA Government Database Exposes 10.2 Million Records Including 8 Million Individuals - URL: https://darkwebinformer.com/alleged-breach-of-tanzanias-brela-government-database-exposes-10-2-million-records-including-8-million-individuals/ - Published: 2026-03-18T17:50:17.000Z - Updated: 2026-03-21T16:25:29.000Z - Author: Dark Web Informer - Tags: Data Breaches Dark Web Informer - Cyber Threat Intelligence # Alleged Breach of Tanzania's BRELA Government Database Exposes 10.2 Million Records Including 8 Million Individuals March 18, 2026 - 1:38:37 PM UTC Tanzania Government Standalone API Access Now Available High-volume threat-intelligence data, automated ingestion endpoints, ransomware feeds, IOC data, and more. [ View API](https://darkwebinformer.com/api-details/) Unlock Exclusive Cyber Threat Intelligence Powered by DarkWebInformer.com Stay ahead of cyber threats with real-time breach tracking, expert analysis, and high quality evidence - built for security professionals, researchers, journalists, and everyday people who take their privacy seriously. [ Subscribe Now](https://darkwebinformer.com/pricing) ## Quick Facts Date & Time 2026-03-18 13:38:37 UTC Threat Actor Spirigatito Victim BRELA (Tanzania) Industry Government Category Data Breach Alleged Records 10.2 Million Individuals Affected \~8 Million Databases 6 Price Credits (Crypto) Breach Date February 4, 2026 Network Open Web Country Tanzania ## Incident Overview A threat actor going by Spirigatito claims to have compromised Tanzanian government infrastructure linked to BRELA (The Business Registrations and Licensing Agency), allegedly retrieving 10.2 million records that include data on approximately 8 million individuals. The actor states the breach occurred on February 4, 2026, and that after the Tanzanian government chose to ignore them, they decided to make the data available for purchase through a dedicated marketplace. Rather than selling the data as a single dump, the actor has built a custom storefront that organizes the stolen records across 6 curated databases, each priced in credits that can be recharged via cryptocurrency (BTC, ETH, USDT, XMR, and 50+ other cryptocurrencies through OxaPay). The databases and their record counts are: - **Business Names (Registry)**: 369K records containing registered business names, sole proprietors, and trade names with full applicant info, location, owner details, and activities. Priced at 2 credits. - **Companies (Corporate)**: 279K records of limited companies with full incorporation data, directors, share capital, registered address, and filing history. Priced at 5 credits. - **Corporate Shareholders (Equity)**: 7K records of shareholder records, equity positions, beneficial ownership, and stake changes. Priced at 8 credits. - **People (Contacts)**: 2.2 million records of individual profiles with verified contact information, demographics, and location data. Priced at 3 credits. - **TRA TINs (Tax)**: 7.4 million Tax Identification Numbers from the Tanzania Revenue Authority registry. Priced at 4 credits. - **Wabunge (Government)**: 407 records of Members of Parliament with constituency data, party affiliations, and contact records. Priced at 6 credits. The marketplace offers data in CSV or JSON format with automatic downloads, preview data and field descriptions for each database, and promotes itself as offering leads from Tanzanians for low cost. The actor also notes that the entire database is still available for bulk purchase. This represents a significant government data breach affecting a substantial portion of Tanzania's formally registered population, business ecosystem, and tax records. ## Compromised Data Categories Business Registration Records Corporate Incorporation Data Director & Officer Details Shareholder & Equity Records Individual Contact Information Demographics & Location Data Tax Identification Numbers (TINs) Parliamentary Records Party Affiliations Business Owner Details ## Image Preview [![Forum post by Spirigatito showing BRELA marketplace with 6 databases totaling 10.2 million records from Tanzanian government infrastructure](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/03/78304038897825111463.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/03/78304038897825111463.png) [![BRELA marketplace showing credit recharge system, purchasing workflow, and cryptocurrency payment options for stolen Tanzanian government data](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/03/78304038897825111464.png)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/03/78304038897825111464.png) ## Claim URL Subscriber Access Required The original listing URL and unredacted claim images are available on the Threat Feed and Ransomware Feed for paid subscribers. [ Subscribe](https://darkwebinformer.com/pricing) Subscriber Access View the original listing URL and unredacted claim images on the feeds below. [ Threat Feed](https://darkwebinformer.com/threat-feed/) [ Ransomware Feed](https://darkwebinformer.com/ransomware-feed) ## MITRE ATT&CK Mapping [ T1190 Exploit Public-Facing Application Targets vulnerabilities in government web applications and infrastructure to gain unauthorized access to backend databases and registries. ](https://attack.mitre.org/techniques/T1190/) [ T1213 Data from Information Repositories Extracts structured records from government registries including business registrations, corporate filings, tax records, and parliamentary data across 6 separate databases. ](https://attack.mitre.org/techniques/T1213/) [ T1005 Data from Local System Collects data directly from compromised government systems, extracting full database tables with millions of records including personal and corporate information. ](https://attack.mitre.org/techniques/T1005/) [ T1560 Archive Collected Data Organizes and packages stolen data into structured CSV and JSON formats across 6 categorized databases for distribution through a custom marketplace. ](https://attack.mitre.org/techniques/T1560/) [ T1567 Exfiltration Over Web Service Distributes stolen government data through a purpose-built web marketplace with automated downloads, credit-based purchasing, and cryptocurrency payment processing. ](https://attack.mitre.org/techniques/T1567/) [ T1589.002 Gather Victim Identity: Email Addresses Harvests personal contact information, demographics, and identification details for 8 million individuals from government registries for resale as leads. ](https://attack.mitre.org/techniques/T1589/002/) Dark Web Informer © 2026 | Cyber Threat Intelligence [DarkWebInformer.com](https://darkwebinformer.com/)