ETFSA listed by the Inc Ransom ransomware group

Overview

The Inc Ransom group has listed ETFSA, a South African financial services platform specialising in exchange-traded funds, on its leak site. The platform offers investment options across sectors, indices and asset classes. The listing appeared on 25 March 2026.

What was published

The group claims to have exfiltrated data from the platform. Financial services platforms hold investor records, account information and financial documentation, which are the likely contents of any exfiltration.

Risks for affected individuals

• Investors' personal and financial data may be exposed.
• Account information could enable phishing and fraud.
• Employees' records may be included.

What remains unknown

• The volume of records involved.
• Whether the data has been published.
• The response status of the company.

What affected people should do

Investors should monitor account activity and be cautious of unsolicited communications. ETFSA should notify affected customers and regulators, review compromised systems, and provide clear guidance.