Business Registration Service (BRS) & KBC Hacked

On Thu, 6 Feb 2025, 07:09 jaflet omengo via KICTANet <
[email protected]> wrote:

> Good Morning Alice,
>
> I agree with you.
>
> Jaflet Omengo Hetenyi.
>
> Building/Civil Engineer ,
>
> *C.ET/M.IET/M.KETRB/M.NCA <C.ET/M.IET/M.KETRB/M.NCA>*
>
> P.O. Box *440* – *50400*
>
> Busia l Kenya
>
> *+254 713 280 423* l *+254 731 326 994*
>
> www.jafletomengo.com <[email protected]>
>
> NCA: nca.go.ke/Search-site-Supervisor/Skilled-construction-worker
> */013/SS/24/28613*
> IET-K: ietkenya.org/registered-members/
> KETRB: portal.ketrb.go.ke:81/_layouts/15/MyDocuments.aspx
> <portal.ketrb.go.ke:81/_Layouts/15/MyMembershipApplications.aspx>
> Facebook: Facebook <www.facebook.com/jaf.leto>
> Find me on: Google Maps
> <www.google.co.ke/maps/@0.4656273,34.1127084,19z?hl=en-GB&authuser=0>
> Twitter <x.com/OmengoJaflet> : x.com/OmengoJaflet
> LinkedIn: www.linkedin.com/in/jaflet-omengo-hetenyi-ba037892/
> YouTube: www.youtube.com/@jafletomengo8819
> <www.youtube.com/channel/UC55ZIS9uA4fOUGgHs9gjWBA>
> Linktree: linktr.ee/JafletOmengo
> Instagram:
> *https://www.instagram.com/jaf1066/ <www.instagram.com/jaf1066/>*
>
> *Pinterest: https://www.pinterest.com/jafleto/
> *
>
> Twitter <x.com/OmengoJaflet> – Facebook
> <www.facebook.com/jaf.leto> – You tube
> <www.youtube.com/channel/UC55ZIS9uA4fOUGgHs9gjWBA> – LinkedIn
> <www.linkedin.com/in/jaflet-omengo-hetenyi-ba037892/> – *KETRB* –
> IET-K – NCA
>
>
> On Thu, 6 Feb 2025 at 00:20, Alice kinuthia via KICTANet <
> [email protected]> wrote:
>
>> I am actually a victim of this.
>> Someone called me on 18th Jan(on a Sunday) around 9 pm claiming x amount
>> has been paid wrongly via buy goods hence requesting for a reversal. Upon
>> asking her where she got my number she said from safaricom😐.
>>
>> So please, BRS how sure are our data is safe anymore🤔
>>
>> On Wed, Feb 5, 2025, 6:03 PM Wainaina Mungai via KICTANet <
>> [email protected]> wrote:
>>
>>>
>>> 😎 @[email protected] <[email protected]>
>>>
>>>
>>> 💯
>>>
>>>
>>> 👍
>>> —
>>> Wainaina Mungai
>>> mobile: +254722811171
>>> email: [email protected]
>>> LinkedIn: ke.linkedin.com/in/wainainamungai
>>>
>>>
>>> www.mafichoni.co.ke
>>>
>>> On Wed, Feb 5, 2025, 9:49 AM Ken Mwaura via KICTANet <
>>> [email protected]> wrote:
>>>
>>>> My two cents, B2Bhint either chose to proceed cautiously due to the
>>>> potential risk of legal action, or they were attempting to create leverage
>>>> to compel BRS to initiate contact and negotiate a settlement.
>>>>
>>>> Regards,
>>>> Ken Mwaura
>>>> www.mpmstudios.co
>>>>
>>>> ——————————
>>>> *From:* Mwendwa Kivuva via KICTANet <[email protected]>
>>>> *Sent:* 05 February 2025 10:31
>>>> *To:* [email protected] <[email protected]>
>>>> *Cc:* Mwendwa Kivuva <[email protected]>
>>>> *Subject:* [kictanet] Re: Business Registration Service (BRS) & KBC
>>>> Hacked
>>>>
>>>> Someone very very very powerful was not happy with the data dump from
>>>> the Business Registration Service (BRS) where you could search all the
>>>> companies registered in Kenya. All records on Kenyan companies on b2bhint
>>>> have been deleted. Read more here
>>>> www.businessdailyafrica.com/bd/corporate/technology/moldovan-firm-deletes-leaked-data-as-watchdog-starts-probe-4913482
>>>>
>>>>
>>>> Best Regards,
>>>> ______________________
>>>> Mwendwa Kivuva, Nairobi, Kenya
>>>> www.linkedin.com/in/mwendwa-kivuva
>>>>
>>>>
>>>> On Mon, 3 Feb 2025 at 11:44, Wainaina Mungai via KICTANet <
>>>> [email protected]> wrote:
>>>>
>>>> That’s a good question Sidney. Apart from addressing vulnerabilities, a
>>>> freemium structure might eliminate the incentive to hack and steal data.
>>>> Most searches citizens make for proprietor/CR12 are imposed on them to
>>>> confirm only the basic ownership info.
>>>>
>>>> Proposal
>>>> ————–
>>>> ° [Free Tier] to offer business name and names of shareholders only;
>>>> which is a common confirmation search.
>>>>
>>>> ° [Premium Tier] for a more granular insights of contact info, ID &
>>>> nationality details, physical address, share allocation, beneficial owner
>>>> etc that a minority have interest in.
>>>>
>>>> Overall, a government agency should simply bill for API queries of
>>>> confidential data instead of requiring applicants to download/scan then
>>>> upload an ID, PIN or CR12 form.
>>>>
>>>> Wainaina
>>>> –
>>>> www.mafichoni.co.ke
>>>>
>>>> On Mon, Feb 3, 2025, 10:52 AM Sidney Ochieng via KICTANet <
>>>> [email protected]> wrote:
>>>>
>>>> Now that the data is out there, I have a question. Why isn’t this data
>>>> out there for free hosted by our government? We’re charged 500 bob for each
>>>> search yet here is a company able to do so for free.
>>>>
>>>> On 2 Feb 2025, at 20:40, Victor Kapiyo via KICTANet <
>>>> [email protected]> wrote:
>>>>
>>>> The Business Registration Service (BRS) is acknowledging reports of a
>>>> potential data breach affecting company registry information and has
>>>> initiated a full investigation, notifying relevant authorities while
>>>> working with cybersecurity experts to assess the situation and implement
>>>> necessary security measures; they assure stakeholders that data security is
>>>> a top priority and will provide updates once the investigation is complete,
>>>> urging patience and cooperation from affected parties.
>>>>
>>>>
>>>> x.com/BRS_Kenya/status/1885993869227008499?t=pQrLV0UPnB5tTGZ540faLQ&s=19
>>>>
>>>> On a similar note, our national broadcaster KBC lost its account on X
>>>> (@KBCChannel1), which has been renamed by the hackers.
>>>>
>>>> x.com/DeepseekOnSoI?t=Oj9Tdm1W8aqWmRUIZIXCMw&s=09
>>>>
>>>> Tunaomba serikali.
>>>>
>>>> Victor
>>>>