Carducci listed by the Warlock ransomware group

Overview

The Warlock ransomware group has listed Carducci, a Cape Town-based fashion brand founded in 1978, on its leak site. The brand specialises in menswear, tailored suits and accessories. The listing appeared on 11 June 2025.

What was published

The group has listed the company as a victim but has not published detailed data descriptions at this stage. Retail operations hold customer records, corporate documentation and financial information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Customer personal data may be exposed.
• Financial records could enable fraud.
• Employees' information may be included.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Customers should monitor their accounts and be cautious of unsolicited communications. Carducci should notify affected customers and staff, review compromised systems, and report the incident to South African authorities.