2026 ACRE Africa — forum claim; ~14.3K farmer records + source code/keys (unverified)
Data compromised
Actor-claimed (unverified): 14,300 farmer/user records with full names, registered mobile numbers, subsidy amounts, field agent codes, ward-level location (Zambia/Kenya samples); plus source code, configs, access tokens, private keys, hardcoded credentials. recordsAffected 14300 = actor count.
Technical writeup
Unverified forum sale / leak claim — Dark Web Informer reported August 7, 2026 that forum user “888” published what they described as a breach of ACRE Africa, an agricultural/climate-risk insurance intermediary for smallholder farmers. The post claimed 14,300 user records plus company source code, configuration files, access tokens, private keys, and hardcoded credentials. Sample farmer rows allegedly included full names, registered mobile numbers, subsidy amounts, field agent codes, and ward-level location, concentrated in Zambia with some Kenyan numbers, offered behind a forum points paywall. DWI marked the claim unverified; ACRE Africa had not publicly addressed it at indexing. BreachHistory labels the row unverified and indexes recordsAffected 14300 as the actor-cited farmer count.
Root cause
Unverified underground forum claim by alias “888” advertising alleged ACRE Africa farmer database plus source code, tokens, and private keys — company had not confirmed at indexing time.