Paratus Telecom listed by the Akira ransomware group

Overview

The Akira ransomware group has listed Paratus, a pan-African network and telecommunications group, on its leak site. The group's post states that more than 84 GB of data is ready to be uploaded. The listing appeared on 21 February 2025.

What was published

The group claims to have exfiltrated over 84 GB from the telecom group. The archive is expected to include network data, corporate records and employee information.

Risks for affected individuals

• Subscriber and network data may be exposed.
• Corporate records could be misused.
• Employees' information may be included.

What remains unknown

• The composition of the 84 GB archive.
• Whether the data has been published.
• The response status of the group.

What affected people should do

The group should review affected systems, notify regulators and customers if subscriber data is involved, and coordinate with authorities in the countries where it operates. Employees should be alert to phishing referencing the group.