Skip to content
brandefense.io
Request A Demo

Search Ransomware Intelligence

Jump to a group, country, industry or search victims.

ZA · #29 of 183 countriesWatch South Africa

Ransomware Attacks In South Africa.

As of Oct 19, 2026, 146 organisations in South Africa have been listed as ransomware victims on leak sites, 0.5% of all confirmed victims and rank 29 of 183 countries. The most active group here is LockBit 3.0.

Updated continuously · figures as of Oct 19, 2026
Confirmed victims
146
Share of all victims
0.5%
Rank
#29 of 183
Most active group
LockBit 3.0
Most hit sector
Consulting

Victims Posted Per Month.

Confirmed ransomware victims in South Africa per month
MonthConfirmed victims
November 20252
December 20254
January 20262
February 20265
March 20265
April 20262
May 20263
June 20261
July 20264
August 20268
September 202611
October 2026 (month in progress)2

Most Active Groups Here

  1. LockBit 3.02114.4% of all victims
  2. The Gentlemen128.2% of all victims
  3. INC Ransom96.2% of all victims
  4. RansomHub64.1% of all victims
  5. Clop53.4% of all victims

Most Hit Industries Here

  1. Consulting1611.0%
  2. Technology138.9%
  3. Government and Public Sector128.2%
  4. Manufacturing117.5%
  5. Financial Services96.2%

Latest Victims.

All 146 victims in South Africa →
Latest confirmed ransomware leak-site victims in South Africa
VictimClaimed byCountryIndustryData claimedPosted
Europ Assistance South Africa
europassistance.co.za
The GentlemenZASouth AfricaFinancial ServicesNot stated
Aeroklas Duys / Duys Engineering Group
aeroklasduys.co.za
DeadlockZASouth AfricaManufacturingNot stated
bcx.co.za
bcx.co.za
INC RansomZASouth AfricaTelecommunicationsNot stated
Edcon
edcon.co.za
The GentlemenZASouth AfricaManufacturingNot stated
Samwumed
samwumed.org
The GentlemenZASouth AfricaHealthcareNot stated
LegalWise
legalwise.co.za
The GentlemenZASouth AfricaConsultingNot stated
Apollo 21 - Quality Truck, Bus & Trailer Spare Parts South Africa
apollo21.co.za
BlackLockZASouth AfricaTransportation and LogisticsNot stated
Guardrisk
guardrisk.co.za
The GentlemenZASouth AfricaFinancial ServicesNot stated

Know When A Company In South Africa, Or One Of Your Suppliers, Is Posted.

Brandefense alerts on leak-site posts for your brands and third parties, with the group's profile and IOC feeds.

Request A Demo

Figures as of Oct 19, 2026. Confirmed leak-site claims collected by Brandefense technologies and validated by Brandefense analysts.

Listed on a leak site means a ransomware group has claimed the company; it is not a confirmed breach. To request a correction or removal, contact Brandefense.