Business Registration Service (BRS) & KBC Hacked

My two cents, B2Bhint either chose to proceed cautiously due to the potential risk of legal action, or they were attempting to create leverage to compel BRS to initiate contact and negotiate a settlement.

Regards,
Ken Mwaura
www.mpmstudios.co

________________________________
From: Mwendwa Kivuva via KICTANet <[email protected]>
Sent: 05 February 2025 10:31
To: [email protected] <[email protected]>
Cc: Mwendwa Kivuva <[email protected]>
Subject: [kictanet] Re: Business Registration Service (BRS) & KBC Hacked

Someone very very very powerful was not happy with the data dump from the Business Registration Service (BRS) where you could search all the companies registered in Kenya. All records on Kenyan companies on b2bhint have been deleted. Read more here www.businessdailyafrica.com/bd/corporate/technology/moldovan-firm-deletes-leaked-data-as-watchdog-starts-probe-4913482

Best Regards,
______________________
Mwendwa Kivuva, Nairobi, Kenya
www.linkedin.com/in/mwendwa-kivuva

On Mon, 3 Feb 2025 at 11:44, Wainaina Mungai via KICTANet <[email protected]<mailto:[email protected]>> wrote:
That’s a good question Sidney. Apart from addressing vulnerabilities, a freemium structure might eliminate the incentive to hack and steal data. Most searches citizens make for proprietor/CR12 are imposed on them to confirm only the basic ownership info.

Proposal
————–
° [Free Tier] to offer business name and names of shareholders only; which is a common confirmation search.

° [Premium Tier] for a more granular insights of contact info, ID & nationality details, physical address, share allocation, beneficial owner etc that a minority have interest in.

Overall, a government agency should simply bill for API queries of confidential data instead of requiring applicants to download/scan then upload an ID, PIN or CR12 form.

Wainaina
–
www.mafichoni.co.ke<www.mafichoni.co.ke>

On Mon, Feb 3, 2025, 10:52 AM Sidney Ochieng via KICTANet <[email protected]<mailto:[email protected]>> wrote:
Now that the data is out there, I have a question. Why isn’t this data out there for free hosted by our government? We’re charged 500 bob for each search yet here is a company able to do so for free.

On 2 Feb 2025, at 20:40, Victor Kapiyo via KICTANet <[email protected]<mailto:[email protected]>> wrote:

The Business Registration Service (BRS) is acknowledging reports of a potential data breach affecting company registry information and has initiated a full investigation, notifying relevant authorities while working with cybersecurity experts to assess the situation and implement necessary security measures; they assure stakeholders that data security is a top priority and will provide updates once the investigation is complete, urging patience and cooperation from affected parties.

x.com/BRS_Kenya/status/1885993869227008499?t=pQrLV0UPnB5tTGZ540faLQ&s=19

On a similar note, our national broadcaster KBC lost its account on X (@KBCChannel1), which has been renamed by the hackers.

x.com/DeepseekOnSoI?t=Oj9Tdm1W8aqWmRUIZIXCMw&s=09

Tunaomba serikali.

Victor