Hytec South Africa listed by the Vect ransomware group

Overview

Hytec, a South African engineering company specializing in hydraulic systems, was listed by the Vect ransomware group on 5 January 2026. The group states that all data was exfiltrated, including personal information and employee records. Hytec supplies hydraulic components and systems to industrial customers across the region.

What was published

According to the Vect listing, the status was negotiating at the time of capture. The group claims the full dataset was taken, including employee information, and describes the sector as engineering solutions. No public download link was active when the listing was reviewed.

Risks for affected individuals

Employee records typically include names, identity numbers, contact details, and payroll information. Their exposure could lead to identity fraud and targeted social engineering. Client data held by an engineering supplier may also include technical documentation and commercial agreements.

What remains unknown

The volume of data is not disclosed. Whether customer project files were captured alongside employee records is unclear, and no sample files have been published to verify the claim.

What affected people should do

Employees should monitor credit reports and be alert to phishing attempts that reference Hytec. The company should verify the claim, identify which records were affected, and notify individuals whose data may have been exposed.