Skip to content
Ransomware News

Ransomware Group incransom Hits: ETFSA

Admin
HookPhish team

Summary

In the latest cybersecurity news, ETFSA — a company operating in the ZA — has fallen victim to a ransomware attack conducted by the group incransom. This data breach, discovered on 2026-03-26 14:17:11.582820, underscores the increasing need for proactive cybersecurity defenses as we continue through 2026.

Incident Report

Attribute Information
Target Organization ETFSA
Threat Group incransom
Summary ETFSA.co.za is a South African financial services platform specializing in exchange-traded funds (ETFs). It offers a wide range of investment options, allowing individuals to invest in various sectors, indices, and asset classes through low-cost, diversified ETFs. The platform provides educational resources, investment solutions, and tools to help investors manage their portfolios effectively. ETFSA also supports tax-free savings accounts (TFSA) and retirement accounts, making it accessible for long-term wealth building
ETFSA.co.za became the target of a cyberattack, and all confidential and personal client data will be published soon. Mike Brown did not worry about the security of his clients’ data; he had the opportunity to ensure the safety of such sensitive data, but he preferred to stay on the sidelines.
+27 82 653 5645 (m)
Mike Brown
Date of Breach 2026-03-25 12:00:00.000000
Discovery Date 2026-03-26 14:17:11.582820
Region ZA

 

Recommended Security Actions

In response to increasing cyber threats, it’s critical to protect your organization with proactive security measures. HookPhish provides enterprise-grade solutions designed to reduce your risk of future attacks:

Protect your organization before it becomes the next headline. Explore HookPhish.

How HookPhish Helps You Stay Ahead

Don’t wait for a breach to take action — stay informed and take control of your cybersecurity posture today.

You can also check if your organization’s data has been exposed using our free Data Breach Checker.

Disclaimer

HookPhish does not engage in the exfiltration, downloading, taking, hosting, viewing, reposting, or disclosure of any stolen information. All breach data reported here is sourced from publicly available threat intelligence feeds for awareness purposes only.

Related articles

Security training designed for people.

See how HookPhish turns phishing simulation, training and threat monitoring into measurable human-risk reduction.

Book a demo Explore solutions