Fidelity Pension Managers: Deadlock Ransomware Attack

Overview

The Deadlock ransomware group has listed Fidelity Pension Managers Limited on its leak site. Fidelity Pension Managers is a licensed Pension Fund Administrator (PFA) in Nigeria, regulated by the National Pension Commission (PenCom). The company manages retirement savings accounts (RSA) and operates digital services including the iPension portal and the FidApp Plus application.

The incident

The listing on the Deadlock leak site dates the attack to 31 May 2026. Our team first observed the victim page on 15 June 2026. The group claims access to data held by the pension administrator. The leak page provides download links for the claimed material.

What remains unknown

• The volume of records exposed is not disclosed in the listing.
• The exact data types included in the package are not confirmed at this stage.
• Whether the claimed data affects RSA holders, employers, or internal staff is not detailed.
• No official statement from Fidelity Pension Managers or PenCom has been published so far.

Recommended actions

Pension contributors and RSA holders should remain alert for phishing attempts that reference their pension accounts. Credentials used on the iPension portal and FidApp Plus should be changed as a precaution. The company should be contacted through its official channels for confirmation of the incident.