TK Holdings Group listed by the Radar ransomware group

Overview

The Radar ransomware group has listed TK Holdings Group, a group of companies with operations in the Democratic Republic of the Congo, on its leak site. The group's activities include timber operations through TK Timber Congo and related support activities. The listing appeared on 18 October 2025.

What was published

The group claims to have exfiltrated corporate data from the holding group. The archive is expected to include business records, operational documentation and employee information.

Risks for affected individuals

• Employees' personal records may be exposed.
• Operational and corporate data could be misused.
• Commercial information may be of value to competitors.

What remains unknown

• The volume of data exfiltrated.
• Whether the data has been published.
• The extent of the intrusion.

What affected people should do

Employees should update credentials and watch for phishing referencing the group. TK Holdings should notify staff and partners, engage cybersecurity experts, and coordinate with authorities in the DRC on the response.