Water Utilities Corporation (WUC) listed by the KillSec ransomware group

Overview

The KillSec ransomware group has listed the Water Utilities Corporation (WUC), Botswana's national water utility, on its leak site. The listing appeared on 20 December 2024. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the utility. The archive is expected to include customer records, billing data and corporate information.

Risks for affected individuals

• Customers' personal data may be exposed.
• Billing records could enable fraud.
• Employees' information may be included.

What remains unknown

• The volume of data exfiltrated.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Customers should monitor their accounts and be cautious of unsolicited communications. WUC should notify affected customers and staff, review compromised systems, and coordinate with Botswanan authorities.