A hacker group known as Kazu has claimed that they hacked the official website of Nepal Police and accessed personal data. They made this claim on a platform called Dark Forum, where they also posted the data for sale.
More Than 2 Million Citizens Affected
The post was titled
“[2M+ Citizens] Nepal Police Central Website Breach (nepalpolice.gov.np)”
This means the hackers claim to have stolen personal information of over 2 million Nepali citizens from the central website of Nepal Police.
Exploit Code Also for Sale
The hacker mentioned that they are selling the exploit code used to breach the site. They claimed that anyone can simply run the provided script to automatically download the stolen data.
Target Was Nepal Police Central Record Portal
The post clearly stated that the target was the Nepal Police Central Record Portal. The official website link was also shared. The hacker described Nepal Police as the central law enforcement agency under the Ministry of Home Affairs and listed services like FIR registration, complaint tracking, and officer directories.
Stolen Data Priced at $7,000
The hacker has put a price of $7,000 on the full set of leaked data, which is approximately NPR 900,000. Contact information, including a Session ID, Signal username, and Qtox address, was provided for interested buyers.
Data Includes Photos, Citizenship, and Passports
According to the post, the stolen data includes:
- Personal photos of Nepali citizens
- Citizenship certificate images
- Passport scans
- Personally Identifiable Information (PII)
- Residential documents
A link was also shared to download sample files that reportedly contain around 500 entries.
Leaked Samples Shared on the Forum
The hacker uploaded screenshots of the stolen data to support their claim. These screenshots include documents and photos of individuals.
Nepal Police Begins Investigation
DIG Dinesh Kumar Acharya, the spokesperson for Nepal Police, said that they are aware of the situation and have started an internal investigation. He said it is still unclear whether the data is old or new and whether it actually belongs to Nepal Police.
Hacker Group Has Past History
According to sources, the police are comparing the leaked sample data with their own system records to verify the claim. This is not the first time the same group has made such a claim. Earlier, they had also claimed to hack the Lumbini Province Public Service Commission and offered 300,000 users’ data for sale on the dark web.
