University of the Witwatersrand (Wits) listed by the Clop ransomware group

Overview

The Clop ransomware group has listed the University of the Witwatersrand (Wits), a public research university in Johannesburg, South Africa, on its leak site. The university offers undergraduate and postgraduate programmes across commerce, law, management and humanities. The listing appeared on 27 October 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the university. The archive is expected to include student records, academic documentation and employee information.

Risks for affected individuals

• Students' personal and academic data may be exposed.
• Staff records contain sensitive information.
• Research data could be of value.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Students and staff should monitor their accounts and be alert to phishing referencing the university. Wits should notify affected individuals, review compromised systems, and follow South African data protection requirements for breach notification.