Tosh Logistics (Toshapp) listed by the Flocker ransomware group

Overview

The Flocker ransomware group has listed Tosh Logistics Co Limited (Toshapp.com), a Tanzanian logistics company, on its leak site. The group's post claims the company's system was breached and all data taken. The listing appeared on 31 January 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have breached the system entirely and taken all data. The archive is expected to include corporate records, client data and operational documentation.

Risks for affected individuals

• Clients' data may be exposed.
• Operational records could be misused.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Business partners should verify communications through official channels. Tosh Logistics should notify partners and staff, review its systems, and report the incident to Tanzanian authorities.