THE ransomware-as-a-service group The Gentlemen has threatened to leak data belonging to South African insurers LegalWise and Samwumed, suggesting more local firms may be affected. The report notes that The Gentlemen is highly active globally, accounting for about 17% of ransomware attacks in July, according to Check Point Software. The group previously breached MIP Holdings in June, a South African insurtech whose software is used by several large insurers, including Hollard Insurance. The attackers are now reportedly extorting third-party firms after exfiltrating data from MIP Holdings and related entities.
The article presents the threat as persuasive but does not indicate that customer data has yet been released, only that The Gentlemen intends to leak it. It frames MIP Holdings as the initial breach point that led to data exposure from other local companies, and it notes the potential for further leaks as the group targets subcontractors and their customers. The piece cites sources including MyBroadband for corroborating details.
In the absence of confirmation of data exfiltration from LegalWise, Samwumed, or others, readers should monitor for any published leaks and updates from the affected firms or reputable security researchers.