Senegal DAF: Cyberattack Detected, Data Integrity Preserved

• Senegal's Direction de l’Automatisation des Fichiers (DAF) confirmed it experienced a cyberattack.
• DAF Director Ibrahima Dieng stated that no personal data of Senegalese citizens, including national identity card information or the electoral file, was compromised.
• The DAF quickly communicated after the incident to reassure the public and resumed services due to maintained data integrity.
• New security measures have been implemented to enhance prevention, detection, and reaction capabilities against future intrusions.
• The DAF acknowledges that no system is completely invulnerable, despite the successful containment of this attack.

While acknowledging the reality of the intrusion, the DAF director firmly asserted that the consequences on the data itself were negligible, with all information remaining protected.

Principal Police Commissioner Ibrahima Dieng, who serves as the Director of the Direction de l’Automatisation des Fichiers (DAF), recently confirmed that his department was targeted by a cyberattack. Speaking during an interview on RSI's "Salam Sénégal" program, Commissioner Dieng acknowledged the occurrence of the intrusion but provided firm assurances that the personal data belonging to Senegalese citizens remained uncompromised. This public statement was a direct response to the DAF cyberattack Senegal, aiming to clarify the situation for the populace.

The DAF director specifically highlighted that critical information, including data associated with national identity cards, as well as the integrity of the electoral file (fichier électoral Sénégal sécurité), was preserved throughout the incident. He reiterated that while the attack itself was indeed detected, it did not succeed in compromising the integrity of the sensitive data administered by the DAF. This clear distinction between the presence of an intrusion and its actual impact on data integrity forms a central pillar of the DAF's public communication strategy following the event.

Following the cyberattack, the DAF moved swiftly to communicate with the public, aiming to reassure citizens about the security of their information and the robustness of their systems. Commissioner Dieng emphasized that the sustained integrity of the files was a key factor enabling the DAF's services to resume operations promptly after the incident. This rapid return to functionality underscored the effectiveness of their cybersecurity measures in preventing a widespread Ibrahima Dieng data breach, thereby minimizing disruption to public services.

The assurances provided by the DAF come amidst broader public interrogations regarding Senegal personal data protection within administrative bodies, as noted by RTS. While acknowledging the reality of the intrusion, the DAF director firmly asserted that the consequences on the data itself were negligible, with all information remaining protected. This stance is crucial for understanding the DAF's position on data security and its approach to incident response, particularly in maintaining public trust regarding sensitive governmental records.

Despite the successful containment of the recent incident and the preservation of Senegal DAF cyberattack data integrity, Commissioner Dieng prudently noted that no computer system can be deemed entirely invulnerable to the evolving landscape of cyber threats. This acknowledgment underscores a realistic and cautious approach to cybersecurity, recognizing the persistent challenges faced by digital infrastructures. In direct response to the attack, the DAF has since implemented additional security measures, aiming to bolster the resilience and robustness of its digital infrastructure.

These enhanced protocols are specifically designed to improve the DAF's capabilities across several critical areas: strengthening the prevention of future intrusions, enabling more effective detection of malicious activities, and establishing a more robust reaction framework to mitigate potential threats swiftly. The Cybersecurity DAF assurances provided by the director indicate a proactive and ongoing commitment to continuous security improvements, ensuring the sustained protection of sensitive government data and maintaining public confidence in the DAF's operations.

This article provides insight into the Senegalese DAF's public communication strategy and stance on data integrity following a cyberattack. Lawyers advising on data protection and cybersecurity in Senegal should note the DAF's assertion that personal data was not compromised, which could influence future regulatory expectations regarding incident response and public disclosure, and monitor for any subsequent official reports or policy changes.

Source: Original reporting via SenePlus and RTS.