Identifier
Created
Classification
Origin
09WINDHOEK121
2009-04-09 13:01:00
CONFIDENTIAL
Embassy Windhoek
Cable title:
NAMIBIA: ALLEGATIONS OF SECURITY BREACHES OF
how-toVZCZCXRO3740 PP RUEHLMC DE RUEHWD #0121 0991301 ZNY CCCCC ZZH P 091301Z APR 09 FM AMEMBASSY WINDHOEK TO RUEHC/SECSTATE WASHDC PRIORITY 0446 INFO RUEHLMC/MILLENNIUM CHALLENGE CORP
C O N F I D E N T I A L WINDHOEK 000121
STATE FOR AF/S, DS/ICI/CR/CIF, DS/PR, DS/CI, and DS/ISSO
SIPDIS
E.O. 12598: DECL: 04/07/2018
TAGS: KCIP PREL WA
SUBJECT: NAMIBIA: ALLEGATIONS OF SECURITY BREACHES OF
GOVERNMENT COMPUTERS
Classified By Ambassador Dennise Mathieu per 1.5 (b) and (d)
C O N F I D E N T I A L WINDHOEK 000121
STATE FOR AF/S, DS/ICI/CR/CIF, DS/PR, DS/CI, and DS/ISSO
SIPDIS
E.O. 12598: DECL: 04/07/2018
TAGS: KCIP PREL WA
SUBJECT: NAMIBIA: ALLEGATIONS OF SECURITY BREACHES OF
GOVERNMENT COMPUTERS
Classified By Ambassador Dennise Mathieu per 1.5 (b) and (d)
1. (C) On April 4, Rainer Ritter (protect),suspended CEO of
the Namibia Financial Institutions Supervisory Authority
(NAMFISA),informed Ambassador Mathieu that he had discovered
irregularities with regard to NAMFISAQs computer system. He
further stated that he had reported those irregularities to
the local police and Namibian Anti-Crime Commission.
Subsequently, Ritter was relieved of his official duties at
NAMFISA and is now facing various charges of misconduct
himself.
2. (C) Ritter claimed that NAMFISAQs system had been used to
hack into the computer system of NamibiaQs National Planning
Commission (NPC). In addition to Namibian government
documents, several Millennium Challenge Corporation (MCC)
documents reportedly had been downloaded from the NPC
directorQs computer onto the NAMFISA system. Ritter believes
those documents were forwarded to the SWAPO Party Youth League
during the debate last fall about MCC Compact ratification.
(Comment. Post believes the SWAPO Party Youth League obtained
copies of draft agreements directly from the NPC Board members
due to the timing of a Board meeting and press statements.
End comment.)
3. (C) Ritter further believes that the NAMFISA system could
be linked to Chinese cyber security incidences reported in the
news recently. He found it odd that the NAMFISA computer
regularly accessed the following IP address Q 239.255.255.250
Q which Ritter traced to California, outside Los Angeles.
4. (C) Comment: Ritter is considered to be a straight arrow.
He told us that he was suspended after investigations turned
up evidence of wrongdoing by senior government officials. His
claims of improprieties at NAMFISA and his suspension have
been reported widely in the local news. Sensitive MCC
documents are not shared with the NPC Board (the Accountable
Entity for the MCC compact),thus the risk of compromise
regarding tenders, for example, is not an issue. Documents
such as drafts of the Program Implementation Agreement and Tax
Agreement were likely on the NPC directorQs computer at the
time of the alleged NAMFISA intrusion, and both are now
public. However, it is disturbing that GRN systems may be
highly vulnerable to cyber attacks within and without Namibia.
Post would appreciate any information that is learned about
the IP address in Para. 3.
MATHIEU
STATE FOR AF/S, DS/ICI/CR/CIF, DS/PR, DS/CI, and DS/ISSO
SIPDIS
E.O. 12598: DECL: 04/07/2018
TAGS: KCIP PREL WA
SUBJECT: NAMIBIA: ALLEGATIONS OF SECURITY BREACHES OF
GOVERNMENT COMPUTERS
Classified By Ambassador Dennise Mathieu per 1.5 (b) and (d)
1. (C) On April 4, Rainer Ritter (protect),suspended CEO of
the Namibia Financial Institutions Supervisory Authority
(NAMFISA),informed Ambassador Mathieu that he had discovered
irregularities with regard to NAMFISAQs computer system. He
further stated that he had reported those irregularities to
the local police and Namibian Anti-Crime Commission.
Subsequently, Ritter was relieved of his official duties at
NAMFISA and is now facing various charges of misconduct
himself.
2. (C) Ritter claimed that NAMFISAQs system had been used to
hack into the computer system of NamibiaQs National Planning
Commission (NPC). In addition to Namibian government
documents, several Millennium Challenge Corporation (MCC)
documents reportedly had been downloaded from the NPC
directorQs computer onto the NAMFISA system. Ritter believes
those documents were forwarded to the SWAPO Party Youth League
during the debate last fall about MCC Compact ratification.
(Comment. Post believes the SWAPO Party Youth League obtained
copies of draft agreements directly from the NPC Board members
due to the timing of a Board meeting and press statements.
End comment.)
3. (C) Ritter further believes that the NAMFISA system could
be linked to Chinese cyber security incidences reported in the
news recently. He found it odd that the NAMFISA computer
regularly accessed the following IP address Q 239.255.255.250
Q which Ritter traced to California, outside Los Angeles.
4. (C) Comment: Ritter is considered to be a straight arrow.
He told us that he was suspended after investigations turned
up evidence of wrongdoing by senior government officials. His
claims of improprieties at NAMFISA and his suspension have
been reported widely in the local news. Sensitive MCC
documents are not shared with the NPC Board (the Accountable
Entity for the MCC compact),thus the risk of compromise
regarding tenders, for example, is not an issue. Documents
such as drafts of the Program Implementation Agreement and Tax
Agreement were likely on the NPC directorQs computer at the
time of the alleged NAMFISA intrusion, and both are now
public. However, it is disturbing that GRN systems may be
highly vulnerable to cyber attacks within and without Namibia.
Post would appreciate any information that is learned about
the IP address in Para. 3.
MATHIEU