ransomware Credible South Africa (ZA) construction

Linkgroup listed by the Arcus Media ransomware group

Linkgroup

📅 03 March 2025
CompanyLinkgroup
CountrySouth Africa (ZA)
Sectorconstruction
Breach date2025-03-03
People affectedNot disclosed
Ransomware grouparcusmedia
Data typescorporate records, client data, project documents

Overview

The Arcus Media ransomware group has listed Linkgroup, a South African landscaping and construction company, on its leak site. The company provides hard landscaping services including patios, retaining walls and decking. The listing appeared on 3 March 2025.

Linkgroup leak listing

What was published

The group claims to have exfiltrated corporate data from the company. The archive is expected to include client records, project documentation and corporate information.

Risks for affected individuals

  • Clients' data may be exposed.
  • Project documents could be misused.
  • Employees' information may be included.

What remains unknown

  • The volume of data exfiltrated.
  • Whether the data has been published.
  • The response status of the company.

What affected people should do

Clients should verify communications through official channels. Linkgroup should notify clients and staff, review its systems, and report the incident to South African authorities.

Sources

  • http://arcuufpr5xxbbkin4mlidt7itmr6znlppk63jbtkeguuhszmc5g7qdyd.onion/?p=421