Ransomware group spacebears hits Codival
Codival — a technology target operating in CI has been listed by the spacebears ransomware group on 2024-08-20. The information below reflects what the threat actor has publicly claimed on their leak site; the details have not been independently verified.
Incident Report
| Target Organization | Codival |
|---|---|
| Threat Group | spacebears |
| Summary | Codival, a technology organization in Côte d’Ivoire, was listed by the spacebears ransomware group on its leak site on 2024-08-21. |
| Date of Breach | 2024-08-20 |
| Discovery Date | 2024-08-21 |
| Region | CI |
| Target Domain | codival.ci |
| Business Sector | Technology |
| Severity | MEDIUM |
Claim by spacebears
CODIVAL was created in 1975, on the initiative of local banks that wanted to secure the transportation of cash within their growing networks.Formerly known as BRINK'S WEST AFRICA, CODIVAL is a subsidiary of the SAGAM International group, which is the leader for all activities related to the securing of cash: cash-in-transit, cash processing, ATM management, electronic security and fire safety.This synergy of skills enables CODIVAL to benefit from the expertise, technical know-how, logistics and professionalism of the group which is represented in Senegal, Benin, Burkina Faso, Mali, Cameroon, and soon to be represented in Gabon, Ghana, Nigeria, Morocco and Central Africa.In Côte d'Ivoire, CODIVAL is the undisputed leader in the field of cash-in-transit, cash processing and ATM Management https://codival.ci/en/
Posted by the spacebears threat actor on its public leak site. This is the group's own statement and has not been independently verified by HackerFeeds.
Sources
Victim website
codival.ci
Leak post (onion / Tor)
http://5butbkrljkaorg5maepuca25oma7eiwo6a2rlhvkblb4v6mf3ki2ovid.onion/companies/35/codival
Open this URL in Tor Browser. Browsing leak sites carries real risk — view passively, never click further.
Disclaimer
HackerFeeds does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.