Elundini Local Municipality listed by the LockBit ransomware group

Overview

The LockBit ransomware group has listed Elundini Local Municipality, an administrative area in the Joe Gqabi District of the Eastern Cape, South Africa, on its leak site. The listing appeared on 4 October 2025.

What was published

The group claims to have exfiltrated data from the municipality. Local governments hold citizen records, administrative data and employee information, which are the likely contents of any exfiltration.

Risks for affected individuals

• Residents' personal data may be exposed.
• Administrative records could enable fraud.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• Whether the release is scheduled.
• The response status of the municipality.

What affected people should do

The municipality should coordinate with provincial cybersecurity authorities, review affected systems, and inform residents and staff. Residents should be alert to phishing referencing the municipality.