Workforce Group listed by the KillSec ransomware group

Overview

The KillSec ransomware group has listed Workforce Group, a Nigerian human resources and recruitment company, on its leak site. The listing appeared on 2 March 2025. At the time of analysis, the group's leak page was not reachable.

What was published

The group claims to have exfiltrated data from the HR company. Staffing agencies hold candidate profiles, HR records and client contracts, which are the likely contents of the exfiltration.

Risks for affected individuals

• Candidates' personal data may be exposed.
• HR records contain sensitive employee information.
• Client contracts could be misused.

What remains unknown

• The volume of data involved.
• The exact contents of the leak.
• Whether the data has been published elsewhere.

What affected people should do

Candidates and employees should monitor their accounts and be alert to phishing referencing the agency. Workforce Group should notify affected individuals, secure its systems, and coordinate with Nigerian authorities.