gpaa.gov.za listed by the lockbit3 ransomware group

Overview

LockBit 3.0 listed the Government Pensions Administration Agency (GPAA), the South African body that administers pensions for government employees, on its leak site on 11 March 2024.

What was published

The listing identified the GPAA as a victim. No detailed public inventory of the stolen data was provided.

Risks for affected individuals

The GPAA holds pensioner identities, banking details and employment histories. Exposure could enable pension fraud, identity theft and targeted phishing against retirees.

What remains unknown

The number of pensioners affected and the precise data categories are not disclosed.

What affected people should do

Pensioners should verify any changes to payment instructions through official GPAA channels, monitor bank accounts and report unsolicited requests for personal data.