First Mutual Holdings listed by the Nightspire ransomware group

Overview

The Nightspire ransomware group has listed First Mutual Holdings, a Zimbabwean financial services group, on its leak site. The group's post references an internal database. The listing appeared on 23 May 2026.

What was published

The group states that the exposed material consists of an internal database. As a financial services holding company, the data is expected to include policyholder records, corporate information and internal operational data.

Risks for affected individuals

• Policyholders' personal and financial data may be exposed.
• Internal database contents could enable targeted fraud.
• Corporate records may be misused.

What remains unknown

• The volume of records in the database.
• Whether the data has been published.
• Which subsidiaries are affected.

What affected people should do

Policyholders should monitor account activity and be cautious of phishing referencing the group. First Mutual should notify affected customers and regulators, review compromised systems, and provide guidance to those whose data may be involved.