ransomware
Credible
South Africa (ZA)
construction
Linkgroup listed by the Arcus Media ransomware group
Linkgroup
CompanyLinkgroup
Domainlinkgroup.co.za
CountrySouth Africa (ZA)
Sectorconstruction
Breach date2025-03-03
People affectedNot disclosed
Ransomware grouparcusmedia
Data typescorporate records, client data, project documents
Overview
The Arcus Media ransomware group has listed Linkgroup, a South African landscaping and construction company, on its leak site. The company provides hard landscaping services including patios, retaining walls and decking. The listing appeared on 3 March 2025.

What was published
The group claims to have exfiltrated corporate data from the company. The archive is expected to include client records, project documentation and corporate information.
Risks for affected individuals
- Clients' data may be exposed.
- Project documents could be misused.
- Employees' information may be included.
What remains unknown
- The volume of data exfiltrated.
- Whether the data has been published.
- The response status of the company.
What affected people should do
Clients should verify communications through official channels. Linkgroup should notify clients and staff, review its systems, and report the incident to South African authorities.
Sources
- http://arcuufpr5xxbbkin4mlidt7itmr6znlppk63jbtkeguuhszmc5g7qdyd.onion/?p=421