Fidelity Security Group listed by the CMD Organization ransomware group

Overview

The CMD Organization ransomware group has listed Fidelity Security Group, a South African integrated security solutions provider, on its leak site. The group operates across guarding, cash management and fire protection services. The listing appeared on 28 June 2026.

What was published

The group claims to have exfiltrated corporate data from the security provider. The archive is expected to include client contracts, operational records, financial data and employee information. The full dataset has not been released publicly yet.

Risks for affected individuals

• Client organisations may have security arrangements exposed.
• Employees' personal records could be misused.
• Operational data may reveal vulnerabilities in client sites.

What remains unknown

• The volume of data stolen.
• Whether the data has been sold or published.
• The extent of the intrusion.

What affected people should do

Client organisations should review their security arrangements and watch for suspicious communications. The company should notify clients and staff, engage cybersecurity experts, and coordinate with South African authorities on the response.