United Finance Egypt listed by the Payload ransomware group

Overview

The Payload ransomware group has listed United Finance Egypt, a non-bank financial institution providing leasing, factoring and mortgage lending, on its leak site. The listing appeared on 3 April 2026, and the group states the breach involved the company's entire infrastructure.

What was published

The group describes the breach as covering the company's entire infrastructure, with the majority of leaked data coming from internal systems. Financial institutions hold loan records, customer information and financial documentation, which are the likely contents of the exfiltration.

Risks for affected individuals

• Customers' personal and financial data may be exposed.
• Loan records could enable fraud.
• The scale of the claimed breach increases the risk of targeted attacks.

What remains unknown

• The volume of records involved.
• Whether the data has been published.
• The response status of the company and regulators.

What affected people should do

Customers should monitor account activity and be cautious of unsolicited requests for personal information. United Finance Egypt should notify affected customers and the Financial Regulatory Authority, secure its systems, and provide clear guidance.