Green Blood Group

Profile narrative

The Green Blood Group, also known as Green Blood Group, is a threat actor that has been publicly linked to a single reported intrusion targeting the Directorate of File Automation in Senegal. The actors compromised two servers within this government agency, which manages national biometric data, immigration records, and birth certificates. According to the disclosed incident, the breach affected the personal data of nearly twenty million residents and resulted in the exfiltration of approximately 139 gigabytes of information. The stolen data was subsequently posted on a dark web leak site, prompting the agency to suspend new national ID card production and publicly acknowledge the compromise after the leak appeared. This activity demonstrates the actor’s focus on a government identity‑management sector within a specific national context.

The intrusion caused measurable operational disruption, with the agency reporting that its domain controller and a personal data server were affected for at least five days. The public statement from the Directorate highlighted concerns about the confidentiality and trust in the state’s digital identity system following the leak. No further details regarding the specific malware families, initial access vectors, or tooling employed by the Green Blood Group have been made available in open sources. Consequently, any description of their technical tactics remains unspecified in the public record. The group’s claim of responsibility and the subsequent leak constitute the only publicly documented campaign attributed to them.

To date, no definitive attribution to a state sponsor, criminal consortium, or other affiliations has been established through public reporting. The absence of disclosed links means that any assessment of the actor’s broader connections or strategic intent would be speculative and is therefore omitted. The Senegal biometric database breach stands as the sole confirmed operation, providing the only concrete basis for a factual profile of the Green Blood Group’s known activities.

Incidents

Attributed incidents are available to members.

Sources

Sources available to members: 0 sources.