2026 BRELA Tanzania — Spirigatito gov registry sale claim; ~8M people / 10.2M records (unverified)
Data compromised
Actor-claimed across 6 DBs (~10.2M records): business names (~369k), companies (~279k), shareholders (~7k), people/contacts (~2.2M), TRA TINs (~7.4M), MPs/Wabunge (~407); ~8M individuals cited—unverified
Technical writeup
Unverified leak-site / forum claim — reported March 18, 2026 (alleged breach date February 4, 2026). Dark Web Informer described actor Spirigatito selling purported BRELA (Tanzania Business Registrations and Licensing Agency) data via a six-database marketplace totaling about 10.2 million records and roughly 8 million individuals, including business registry rows, corporate filings, shareholder data, people/contact leads, Tanzania Revenue Authority TIN records, and a small Members of Parliament set. BRELA had not issued a matching public confirmation in sources reviewed at indexing time. Catalog uses the actor-cited ~8 million individuals figure labeled unverified.
Root cause
Unverified forum claim by actor Spirigatito alleging breach of Tanzania BRELA government business-registration databases sold via a credit marketplace—agency had not confirmed at catalog time