Syrian Foreign Ministry Data Leak Exposes Diplomatic and Personal Records
A massive leak of sensitive documents from Syria’s Ministry of Foreign Affairs and Expatriates has raised serious concerns about the country’s digital security during its transitional phase. Nearly 19 gigabytes of data including diplomatic cables, official correspondence, salary records, personal citizen data, and financial documents were published on a dedicated Telegram channel in late 2024.
The leaked files span the period following the fall of the former regime in December 2024 and contain scanned internal records, embassy communications, payroll details, visa documents, and real estate transactions. The breach has sparked debates over institutional vulnerabilities, with experts warning of long-term political and psychological damage from exposed diplomatic and personal information.
The Foreign Ministry confirmed the leak, stating that it had launched an investigation in coordination with technical and security agencies to identify the source and scope of the incident. Officials emphasized that operations remain unaffected but cautioned against relying on potentially manipulated materials circulating online. A ministry source denied claims of a cyberattack, attributing the breach to an internal employee with access to administrative systems.
Cybersecurity experts, including data management specialist Mohammad Tawfiq Nahlawi, highlighted systemic failures in information governance, stressing that weak access controls and a lack of data classification protocols enabled the leak. Nahlawi warned that such incidents underscore the need for stricter institutional safeguards, including mandatory encryption, restricted physical access to devices, and comprehensive audit logs to track data movement.
The ministry has pledged to pursue legal action against those responsible while reinforcing measures to protect sensitive information. The incident serves as a stark reminder of the risks posed by internal threats and the critical need for robust data security frameworks in government institutions.
Source: https://english.enabbaladi.net/archives/2026/06/19gb-leak-exposes-syrian-foreign-ministry-data/
Syria’s Ministry of Foreign Affairs and Expatriates TPRM report: https://www.rankiteo.com/company/syrianmofaex
"id": "syr1781432903",
"linkid": "syrianmofaex",
"type": "Breach",
"date": "6/2026",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 'Citizens (personal data), '
'diplomatic personnel, embassy '
'staff',
'industry': 'Diplomacy/Government',
'location': 'Syria',
'name': 'Syria’s Ministry of Foreign Affairs and '
'Expatriates',
'type': 'Government'}],
'attack_vector': 'Internal Threat',
'data_breach': {'data_encryption': 'Likely unencrypted (per expert warnings)',
'data_exfiltration': 'Published on a dedicated Telegram '
'channel',
'file_types_exposed': ['Scanned internal records',
'PDFs',
'Images'],
'personally_identifiable_information': 'Yes (personal citizen '
'data, salary records, '
'visa documents)',
'sensitivity_of_data': 'High (diplomatic and personal '
'records)',
'type_of_data_compromised': ['Diplomatic cables',
'Official correspondence',
'Salary records',
'Personal citizen data',
'Financial documents',
'Visa documents',
'Real estate transactions']},
'date_detected': '2024',
'date_publicly_disclosed': '2024',
'description': 'A massive leak of sensitive documents from Syria’s Ministry '
'of Foreign Affairs and Expatriates has raised serious '
'concerns about the country’s digital security during its '
'transitional phase. Nearly 19 gigabytes of data including '
'diplomatic cables, official correspondence, salary records, '
'personal citizen data, and financial documents were published '
'on a dedicated Telegram channel in late 2024.',
'impact': {'brand_reputation_impact': 'Long-term political and psychological '
'damage from exposed diplomatic and '
'personal information',
'data_compromised': '19 GB of sensitive data',
'identity_theft_risk': 'High (personal citizen data exposed)',
'operational_impact': 'Operations remain unaffected (per official '
'statement)',
'systems_affected': 'Administrative systems of Syria’s Ministry of '
'Foreign Affairs and Expatriates'},
'investigation_status': 'Ongoing',
'lessons_learned': 'Systemic failures in information governance, including '
'weak access controls, lack of data classification '
'protocols, unencrypted data, unrestricted physical access '
'to devices, and absence of audit logs. Need for stricter '
'institutional safeguards.',
'post_incident_analysis': {'corrective_actions': 'Implement stricter '
'institutional safeguards, '
'including mandatory '
'encryption, restricted '
'physical access, '
'comprehensive audit logs, '
'and data classification '
'protocols',
'root_causes': 'Internal employee with access to '
'administrative systems, weak '
'access controls, lack of data '
'classification protocols, '
'unencrypted data, unrestricted '
'physical access to devices, '
'absence of audit logs'},
'recommendations': ['Mandatory encryption of sensitive data',
'Restricted physical access to devices',
'Comprehensive audit logs to track data movement',
'Data classification protocols',
'Enhanced access controls'],
'references': [{'date_accessed': '2024',
'source': 'Telegram channel (leaked data)'}],
'regulatory_compliance': {'legal_actions': 'Pledged to pursue legal action '
'against those responsible'},
'response': {'communication_strategy': 'Official statement confirming the '
'leak, cautioning against reliance on '
'manipulated materials',
'incident_response_plan_activated': 'Launched an investigation '
'in coordination with '
'technical and security '
'agencies',
'remediation_measures': 'Pledged to pursue legal action, '
'reinforce measures to protect sensitive '
'information, implement stricter '
'institutional safeguards (encryption, '
'restricted physical access, audit '
'logs)'},
'stakeholder_advisories': 'Officials cautioned against relying on potentially '
'manipulated materials circulating online.',
'threat_actor': 'Internal employee',
'title': 'Syrian Foreign Ministry Data Leak Exposes Diplomatic and Personal '
'Records',
'type': 'Data Leak',
'vulnerability_exploited': 'Weak access controls, lack of data classification '
'protocols, unencrypted data, unrestricted '
'physical access to devices, absence of audit logs'}