The Methodist Church of Southern Africa listed by the Beast ransomware group

Overview

The Beast ransomware group has listed The Methodist Church of Southern Africa, a Christian denomination with congregations across the region, on its leak site. The church provides worship services and educational support programmes. The listing appeared on 2 October 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the church. The archive is expected to include member records, administrative documentation and financial information.

Risks for affected individuals

• Members' personal data may be exposed.
• Financial records could enable fraud.
• Volunteers' and staff information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Members should monitor their accounts and be cautious of unsolicited communications. The church should notify affected members and staff, review its systems, and report the incident to relevant authorities.