mofaga.gov.np Listed by funksec Ransomware Group

On December 30, 2024, the Ministry of Federal Affairs and General Administration of Nepal (mofaga.gov.np) appeared on the leak site of the funksec ransomware group. Internal files were allegedly exfiltrated during a ransomware attack on the government ministry responsible for federal affairs, local governance, and public administration across Nepal.

What's Publicly Reported from Reporting

Public reporting indicates the ministry’s systems were compromised and data was taken. The incident was listed on the group’s leak page hosted on the dark web, with the primary source being the funksec leak site via ransomware.live. Available reporting describes the exposed material as internal files, though the exact volume and complete list of records remain unclear. No confirmed victim count has been released, and the precise date of initial compromise has not been publicly detailed beyond the December 30 listing. The ministry oversees decentralization and local development programs, meaning any leaked documents could contain operational data tied to government employees, contractors, or citizens interacting with provincial and municipal services.

Why This Matters for You and Your Family

When a government ministry that handles administrative records suffers a breach, the ripple effects reach ordinary citizens. Your personal information may sit in procurement files, employee databases, or citizen service logs held by such agencies. If those records are now in criminal hands, identity thieves or harassers can use them to target you directly. For families, this includes details that could expose home addresses, family member names, or contact information linked to official correspondence. Even without immediate financial loss, the long-term risk is persistent unwanted contact or fraud attempts that waste your time and erode your peace of mind.

The Doxxing and Identity-Chain Implications

Credential leaks and internal documents from government breaches frequently cascade into doxxing chains. Attackers cross-reference leaked emails, usernames, or phone numbers with gaming accounts, social media handles, and personal websites. Once a single link is made, the entire household profile becomes visible. Children’s gaming accounts are especially vulnerable because kids often reuse simple passwords or email addresses tied to family domains. A single exposed government record can therefore lead months later to account takeovers, swatting attempts, or publication of home addresses. This is why continuous visibility across both corporate breaches and consumer platforms is essential.

Funksec Group’s Known Track Record

Public reporting attributes the attack to the funksec ransomware group. The group emerged in recent years and has targeted organizations across multiple sectors, listing victims on dedicated leak sites when ransom demands are unmet. Their typical playbook involves initial access through common vulnerabilities or phishing, followed by exfiltration of sensitive files and deployment of ransomware. They then pressure victims with deadlines for payment, threatening to publish stolen data. Exact prior victim lists and success rates are based on what the group itself publishes, so details should be treated with caution. Readers can follow independent trackers for updated information on funksec activity.

What to do

• Run a DoxxScan to map every link between your emails, phone numbers, handles, and real-world identity, then use the cleanup to remove what you can.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure of your data is caught in hours rather than months.
• Rotate any passwords you used on mofaga.gov.np or related government portals anywhere else they are reused, and switch to 2FA through an authenticator app instead of SMS.
• Cover the entire household with DoxxScan family protection that extends to dependents and children’s gaming accounts often chained to the same addresses or emails.
• Let remediation specialists handle repeated takedown requests across data brokers and leak sites on your behalf.

The most effective defense is early detection paired with decisive action before criminals connect the dots. Start your DoxxScan trial and let its AI-powered identity-chain mapping plus hands-on remediation by specialists work for your family, including protection for gaming accounts that so often become the weak link in these cascades. Staying ahead of the next leak is now a practical necessity for anyone whose data touches government systems.