Rawaj Consumer Finance listed by the Nightspire ransomware group

Overview

The Nightspire ransomware group has listed Rawaj Consumer Finance, an Egyptian non-bank consumer finance company, on its leak site. The listing appeared on 19 May 2026.

What was published

The group's post lists the following categories of data:

• Sales related documents
• Human resources data
• Sensitive employee records
• Email and SMS data

Risks for affected individuals

• Employees' sensitive records may be exposed.
• Email and SMS data could enable phishing and account takeover.
• Sales documents may reveal customer information.

What remains unknown

• The volume of data involved.
• Whether customer financial records are included.
• The timeline of any public release.

What affected people should do

Employees and customers should be alert to phishing that references the company and monitor account activity. Rawaj should notify affected individuals, secure its systems, and report the incident to Egyptian financial regulators.