ransomware
Credible
South Africa (ZA)
government
African National Congress (ANC) listed by the Black X ransomware group
African National Congress (ANC)
CompanyAfrican National Congress (ANC)
Domainanc1912.org.za
CountrySouth Africa (ZA)
Sectorgovernment
Breach date2025-08-28
People affected500,000
Ransomware groupBlack X
Data typesmember records, administrative data, corporate information
Overview
The Black X ransomware group has listed the African National Congress (ANC), South Africa's governing party, on its leak site. Formed in 1912, the ANC is a national liberation movement and political party. The listing appeared on 28 August 2025.

What was published
The group claims to have exfiltrated data from the party. The archive is expected to include member records, administrative documentation and organisational information.
Risks for affected individuals
- Members' personal data may be exposed.
- Political party records are sensitive.
- Organisational data could be misused.
What remains unknown
- The volume of data exfiltrated.
- Whether the data has been published.
- The response status of the party.
What affected people should do
The party should coordinate with South African cybersecurity authorities, review affected systems, and inform members and staff. Members should be alert to phishing referencing the party.
Sources
- http://blackxppq2jvqyg4slyg3sbszv7ib2avaaycvhff5qipgdoepqi57xyd.onion/target/gBV5i9dBcgUNbd