Medswana listed by the KillSec ransomware group

Overview

The KillSec ransomware group has listed Medswana, a Botswana medical services company, on its leak site. The listing appeared on 20 May 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the medical company. The archive is expected to include patient records, medical documentation and corporate information.

Risks for affected individuals

• Patient medical data may be exposed.
• Healthcare records are sensitive and could be used for fraud.
• Employees' personal information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Patients should monitor for unusual activity and be cautious of unsolicited communications referencing the company. Medswana should notify affected patients and authorities, review its systems, and follow data protection requirements for medical data breaches.