SBC Tanzania listed by the Morpheus ransomware group

Overview

The Morpheus ransomware group has listed SBC Tanzania Limited, a beverage manufacturer and distributor established in 2001, on its leak site. The company produces and distributes PepsiCo products in Tanzania and reports revenue of about $42.5 million. The listing appeared on 30 March 2026.

What was published

The group claims to have exfiltrated corporate data from the beverage company. The archive is expected to include commercial contracts, supplier records, distribution data and financial documents.

Risks for affected individuals

• Business partners could be targeted using contract data.
• Financial records may facilitate fraud.
• Employees' personal information may be part of the archive.

What remains unknown

• The volume of data stolen.
• Whether the data has been published.
• The negotiation status.

What affected people should do

Business partners should verify payment requests through direct contact with the company. SBC Tanzania should notify partners and staff, review the affected systems, and report the incident to Tanzanian authorities.