ransomware
Credible
South Africa (ZA)
insurance
The Unlimited listed by the DragonForce ransomware group
The Unlimited
CompanyThe Unlimited
Domaintheunlimited.co.za
CountrySouth Africa (ZA)
Sectorinsurance
Breach date2026-03-20
People affectedNot disclosed
Ransomware groupdragonforce
Data typespolicyholder data, claims records, customer information
Overview
The DragonForce ransomware group has listed The Unlimited, a South African insurance provider founded in 1994, on its leak site. The company offers health, auto, legal and life insurance products. The listing appeared on 20 March 2026.
What was published
The group claims to have exfiltrated data from the insurer. The archive is expected to include policyholder records, claims documentation and customer information.
Risks for affected individuals
- Policyholders' personal and financial data may be exposed.
- Claims records could enable fraud.
- Employees' information may be included.
What remains unknown
- The volume of records involved.
- Whether the data has been published.
- The response status of the company.
What affected people should do
Policyholders should monitor account activity and be cautious of unsolicited communications. The Unlimited should notify affected customers and regulators, review compromised systems, and provide guidance to those affected.

Sources
- http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog/?post_uuid=da525115-b16e-40d7-a064-086aed1003de