DC Partner (Pty) Ltd listed by the Krybit ransomware group

Overview

The Krybit ransomware group has listed DC Partner (Pty) Ltd, a South African payment distribution agency (PDA), on its leak site. DC Partner is one of only four NCR-accredited cash management and payment distribution providers in the country, moving cash and processing payments for retailers and financial institutions. The listing was published on 2 August 2026.

What was published

The group claims to have exfiltrated corporate data during the intrusion. Based on the type of business, the exposed material is expected to include customer payment records, transaction logs, financial accounts and internal employee information. The exact volume of stolen data has not been disclosed by the group at the time of writing.

Risks for affected individuals

• Customers whose payment details were processed by DC Partner could face fraud if card or bank data is reused.
• Employees whose personal records are included may be targeted by phishing or identity theft.
• The public listing exposes the organisation to follow-on extortion attempts.

What remains unknown

• The precise number of records stolen.
• Whether the group has published sample files or a full data dump.
• The extent of the intrusion and how long the attackers were inside the network.

What affected people should do

Customers who used DC Partner services should monitor bank statements and card transactions for unusual activity. The company should notify regulators and affected clients under applicable data protection rules, and advise customers to reset credentials used on any related accounts.