NAMRIA Data Breach: Hacker Claims to Leak 231 Pages of Internal ICT Equipment Records
The threat actor, “Klammer” has publicly claimed responsibility for a data breach targeting the National Mapping and Resource Information Authority (NAMRIA), releasing 231 pages of internal ICT equipment validation documents online.
In a post uploaded on social media, the hacker taunted NAMRIA’s development team, saying they “couldn’t fix it,” and claimed to have inserted a “free backdoor” into the system. The leaked files were reportedly taken “straight from AD,” suggesting unauthorized access to Active Directory or a similar centralized system.
The hacker shared a temporary download link valid for 10 days, containing detailed ICT records such as:
• Computer and equipment model numbers
• CPU and hardware specifications
• Assigned monitors, printers, and UPS units
• End-user names and office assignments
• Branch and division-level summaries
A sample page of the leaked list shows detailed breakdowns from NAMRIA’s ICT Equipment Validated List (NAMRIA-ICTRM-Form09 Ver3 Rev00), dated 15 November 2025, including data from the Support Services Branch, Administrative Division, and various offices under them.
Screenshots posted by the hacker also show automated scripts generating PDF reports per branch, reinforcing claims of system-level access.
The post additionally tagged the Department of Information and Communications Technology (DICT), sarcastically asking if they could help NAMRIA obtain a Meta verification badge, criticizing the agency’s social media presence.
As of now, NAMRIA has not issued an official statement regarding the alleged breach, the scope of exposure, or whether internal systems have been secured. The hacker’s claim of installing a backdoor raises further concerns about potential ongoing access.
This remains a developing story as agencies look into the validity and impact of the leaked data.
