zb.co.zw listed by the madliberator ransomware group

Overview

On 13 July 2024, the Mad Liberator ransomware group listed ZB Financial Holdings on its leak site. ZB Financial Holdings is one of the most diversified financial services groups on the Zimbabwe Stock Exchange, with a history tracing back to the founding of the Zimbabwe Banking Corporation in the early 1980s.

What was published

The Mad Liberator listing named ZB Financial Holdings as a victim without disclosing the volume of data exfiltrated. Mad Liberator typically targets organisations and threatens to release data, though its publication practices have varied. No archive linked to ZB was observed during the analysis window.

Risks for affected individuals

As a financial services group, ZB holds customer account data, transaction records and employee information across its banking and related operations. Exposure of such data could lead to phishing, fraud and identity theft for customers and staff.

What remains unknown

The categories and volume of stolen data, and whether the group published any files, are not confirmed. ZB Financial Holdings has not released a detailed statement about the incident.

What affected people should do

Customers should monitor bank statements for unauthorised activity, change online banking credentials, and contact the bank through official channels if they receive suspicious communications. Staff should reset passwords and enable multi-factor authentication.