Intsika Yethu Municipality listed by the The Gentlemen ransomware group

Overview

The Gentlemen ransomware group has listed Intsika Yethu Municipality, an administrative area in the Chris Hani District of the Eastern Cape, South Africa, on its leak site. The listing appeared on 15 February 2026.

What was published

The group claims to have exfiltrated data from the municipality. Local governments hold citizen records, administrative data and employee information, which are the likely contents of any exfiltration. At the time of analysis, the group's leak page was not reachable.

Risks for affected individuals

• Residents' personal data may be exposed.
• Administrative records could enable fraud.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

The municipality should coordinate with provincial and national cybersecurity authorities, review affected systems, and inform residents and staff. Residents should be alert to phishing referencing the municipality.