ByteToBreach have breached Ikeja Electric, encrypting 50+ hosts, disrupting systems, and taking multiple subdomains offline. The actor also have stolen customer, employee, and business databases, source code, Active Directory data with offline cracked passwords, and impacted metering platforms linked to several vendors.

Threat actor: ByteToBreach

Sector: Energy / Utilities

Data type: Customer records, employee data, business databases, source code, Active Directory credentials

Observed: Apr 28, 2026

Sources:

https://x.com/H4ckmanac/status/2049126582694875608

https://x.com/CyhawkAfrica/status/2049109369522934179

https://darkforums.su/Thread-NG-Ikeja-Electric-Databases-Ransomware

https://preview.redd.it/ucx5htva8yxg1.png?width=2503&format=png&auto=webp&s=dd43e1915cc196076da0ef77c74cfe735daf131b