> ## Content Index
> Fetch the complete content index at: https://darkwebinformer.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# Libyan Ministry of Education Allegedly Breached, Students' IDs and Photos Threatened With Release
- URL: https://darkwebinformer.com/libyan-ministry-of-education-allegedly-breached-students-ids-and-photos-threatened-with-release/
- Published: 2026-07-02T22:23:21.000Z
- Updated: 2026-07-02T22:23:21.000Z
- Author: Dark Web Informer
- Tags: Data Breaches

Breach Report ![Libya flag](https://flagcdn.com/w40/ly.png)Libya Education Involves Minors 

## Libyan Ministry of Education Allegedly Breached, Students' IDs and Photos Threatened With Release

A threat actor using the alias **EvaN47** claims to have breached the **Libyan Ministry of Education** (moe.gov.ly) and is threatening to publish a **287GB dataset of students' data** if the ministry does not make contact. Per the post, it includes all secondary-education completion certificates for students across Libya, students' **national ID numbers**, personal photos, passport photos, and other official documents. The sample thumbnails include students' facial photographs and identity documents; because this involves **minors' personal data**, no samples are reproduced or hosted here. This is the same actor and contact channel behind a recent breach claim against the Libyan Civil Aviation Authority. The claim is **unverified**.

Severity CRITICAL 

Data287 GB

TypeStudent records

Country![Libya flag](https://flagcdn.com/w40/ly.png)Libya

ActorEvaN47

### ▣Post details

TargetLibyan Ministry of Education (moe.gov.ly)

Country![Libya flag](https://flagcdn.com/w40/ly.png)Libya

SectorGovernment / Education

Claim287 GB of student data

DataCertificates, national IDs, photos

ThreatPublish if no contact (extortion)

ObservedJul 2, 2026

ActorEvaN47

### !Allegedly included

- 287 GB dataset
- Secondary-education certificates
- Students' national ID numbers
- Students' personal photos
- Passport photos
- Official / administrative documents
- Ministry system files
- Involves minors' data

### ◱Screenshot(s)

[ ![Libyan Ministry of Education data breach forum post screenshot, July 2026 (1 of 2)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/07/7982435698726359876235987623598723.png) Screenshot 1 Redacted: students' data ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/07/7982435698726359876235987623598723.png) [ ![Libyan Ministry of Education data breach sample thumbnails screenshot, July 2026 (2 of 2)](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/07/7982435698726359876235987623598724.png) Screenshot 2 Redacted: students' data ](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/size/w1304/format/webp/2026/07/7982435698726359876235987623598724.png) 

### ⚠Potential impact

The dataset reportedly links students' names and national ID numbers to their photos, passport photos, and education certificates. Because secondary-education students in Libya include minors, this is child-related personal data, and its exposure would create lasting risks of identity theft, fraud, and targeting, with national ID numbers and biometric photos that cannot be reset. The actor threatens to publish the data if no contact is made. The sample thumbnails are shown here only in redacted form, and no identifiers or contact channel are reproduced. The claim is unverified.

### iStatus

Unverified 

The actor posted category descriptions, sample thumbnails, and a contact channel, and threatens publication if not contacted. No sample records, identifiers, student photos, or the contact channel are reproduced here. This matches the same actor and contact seen in a recent claim against the Libyan Civil Aviation Authority. The claim is **unverified** and the Libyan Ministry of Education has not publicly addressed it.

Dark Web Informer tracks incidents like this across the [threat feed](https://darkwebinformer.com/threat-feed/) and [ransomware feed](https://darkwebinformer.com/ransomware-feed/). **Subscribers** get the full claim details and ongoing alerts. [View pricing →](https://darkwebinformer.com/pricing) 

[DARK WEB INFORMER](https://darkwebinformer.com/) \- THREAT INTELLIGENCE