Provident Insurance Ghana listed by the APT73 ransomware group

Overview

The APT73 ransomware group has listed Provident Insurance Limited, a Ghanaian insurance company, on its leak site. The listing appeared on 27 April 2026.

What was published

The group claims to have accessed the insurer's systems and copied data. Insurance companies hold policyholder records, claims documentation and internal administrative data, which are the likely contents of any exfiltration.

Risks for affected individuals

• Policyholders' personal and financial data may be exposed.
• Claims records could enable fraud.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• Whether the release is scheduled.
• The response status of the company.

What affected people should do

Policyholders should monitor account activity and be cautious of unsolicited communications. Provident Insurance should notify affected customers and the National Insurance Commission, review compromised systems, and provide guidance to those affected.