Currimjee Group listed by the Warlock ransomware group

Overview

The Warlock ransomware group has listed the Currimjee Group, a Mauritian conglomerate active since 1890, on its leak site. The group operates across telecommunications, media, energy, real estate, tourism, food and financial services. The listing appeared on 2 May 2025.

What was published

The group has listed the conglomerate as a victim but has not published detailed data descriptions at this stage. The archive is expected to include business records, financial documents and employee files across the group's operations.

Risks for affected individuals

• Employees' personal records may be exposed.
• Commercial data could be of value to competitors.
• Financial information may enable fraud attempts.

What remains unknown

• Whether data has been exfiltrated.
• The volume of records involved.
• The timeline of any release.

What affected people should do

Employees should update credentials and watch for phishing referencing the group. Currimjee should notify staff and partners, engage cybersecurity experts, and coordinate with Mauritian authorities on the response.