Globacom Limited Listed by alphv Ransomware Group

On July 26, 2023, Nigerian telecommunications provider Globacom Limited (Glo) appeared on the leak site of the alphv ransomware group. The listing states that the attackers exfiltrated more than 600 GB of internal files during a ransomware incident and gave the company’s top management, including references to Mike Adenuga, three days to negotiate or face full public release of the data.

Details in the Leak-Site Listing

The alphv posting, still accessible via the ransomware.live mirror, claims the breach targeted Globacom’s internal network and resulted in the theft of sensitive company records. It explicitly lists the categories of information now held by the attackers: payments, financial data of the company, financial data of employees, and signed documents. The disclosure does not quantify the number of affected employee or customer records, nor does it specify the exact initial access vector or the date the encryption occurred. The group warned that refusal to negotiate would lead to the entire archive being published for free download.

Why This Matters for You and Your Family

Even though the primary target is a large Nigerian telecom operator, the exposed data includes financial data of employees. If you or anyone in your household ever worked at Globacom, Glo, or any of its subsidiaries, your personal financial details may now sit in an attacker-controlled archive. That information can be combined with other leaks to open accounts in your name, file fraudulent tax returns, or pressure you directly. The three-day ultimatum has long expired, increasing the chance that at least some of the material has already circulated beyond the initial extortion attempt.

The Doxxing and Identity-Chain Risks

Financial records and signed documents are high-value fuel for identity chaining. Attackers routinely cross-reference employee payroll files with earlier credential leaks, social-media handles, and phone numbers tied to Glo SIM cards. Once those links are mapped, a single exposed work email can unlock personal accounts, including gaming logins used by you or your children. Credential leaks of this nature frequently cascade into account takeovers that expose chat histories, location data, and family photographs. DoxxScan by GalaxyWarden continuously monitors across 13.1B+ breach records and 100+ platforms with AI-powered identity-chain mapping, while its specialists perform hands-on remediation; the service also covers household and children’s gaming accounts that often become the next link in the extortion chain.

Alphv’s Publicly Known Track Record

Public reporting attributes the alphv group, also known as BlackCat, with emerging in late 2021 after the shutdown of the REvil ransomware operation. The gang has since hit hundreds of organizations across North America, Europe, and Africa, including healthcare providers, manufacturing firms, and other telecom operators. Their typical playbook begins with phishing or exploitation of remote-access tools to gain initial access, followed by lateral movement, data exfiltration, and deployment of custom ransomware. After encryption they launch a double-extortion campaign: first demanding ransom to decrypt, then threatening to publish the stolen files on their leak site if payment is not received. The Globacom listing follows this exact pattern, with the added personal appeal to the company’s founder.

What to do

• Run a DoxxScan to map every link between your email addresses, phone numbers tied to Glo service, and real-world identity, using the cleanup of Warden.
• Enable continuous DoxxScan monitoring so any future exposure of your financial or employment data is flagged within hours rather than months.
• Rotate every password you ever used at Globacom or Glo anywhere it has been reused, and switch on 2FA through an authenticator app instead of SMS.
• Cover the household with DoxxScan family protection that extends to dependents and children’s gaming accounts sharing the same address or linked credentials.
• Let the remediation specialists handle takedown requests for any personal documents that surface on data-broker or extortion sites.

The incident shows how quickly a corporate ransomware breach can become a personal privacy emergency once employee financial records enter the criminal ecosystem. Acting promptly on the exposure pathways opened by the alphv listing can limit the long-term damage to your identity and your family’s digital footprint. Start your DoxxScan trial today to gain both immediate visibility and specialist support.