Climatron listed by the Inc Ransom ransomware group

Overview

The Inc Ransom group has listed Climatron, a South African HVAC equipment company, on its leak site. The group's post describes the exposed data as including bank payment data, taxes and technical documentation. The listing appeared on 1 October 2025.

What was published

The group's post lists the following categories of data:

• Bank payment data
• Tax records
• Technical documentation

Risks for affected individuals

• Bank payment data could enable financial fraud.
• Tax records contain sensitive business information.
• Technical documentation may have commercial value.

What remains unknown

• The volume of data involved.
• Whether customer data is included.
• The response status of the company.

What affected people should do

The company should notify affected business partners and staff, review compromised systems, and coordinate with South African authorities on the response. Partners should verify any unusual payment requests.