Ransomware victim disclosure
← All victimsMegasurf Fibre & Wireless Internet
listed as megasurf.co.za · Claimed by krybit · listed 1 month ago
Status timeline
- Listed
Apr 9, 2026
- Data leaked
At a glance
- Group
- krybit
- Status
- Data leaked
- Country
- ZA
- Sector
- Consumer Services
- Listed on leak site
- Apr 9, 2026
About the victim
AI dossier — public-source company profileMegasurf Fibre & Wireless Internet is a South African ISP and data center operator based in the Vaal Triangle region of Gauteng. The company provides high-speed fibre and wireless internet connectivity to both residential and business customers, with packages ranging from 10 Mbps to 10 Gbps, independent of major national infrastructure providers. It also operates a data center offering colocation, dedicated server hosting, VPS hosting, and 24/7 remote hands services.
- Industry
- Internet Service Provider & Data Center Operations
- Address
- Vaal Triangle, Gauteng, South Africa (serving Vanderbijlpark, Vereeniging, Meyerton, Sasolburg, Parys, Johannesburg, Nigel, Heidelberg, Vaal Marina)
Attack summary
Severity: high — Megasurf operates as both an ISP and a data center hosting third-party clients' infrastructure; a confirmed data publication attack on such an entity risks exposure of business customer data, network configurations, and hosted services — representing significant downstream impact beyond the primary victim.The ransomware group Krybit claims to have attacked Megasurf, with the disclosure status indicating data has been published. The leak post describes Megasurf as an ISP and data center operator, suggesting potential exposure of customer, network, and infrastructure-related data.
Data the group says was taken
AI dossier — extracted from the leak post- Customer account data
- Network infrastructure configurations
- Hosted client data (colocation/VPS customers)
- Business records
- Potentially VoIP account information
What the group claims
Megasurf is an internet service provider and data center operator specializing in high-speed fibre and wireless internet...
The leak post
captured from the group's siteECLAGESTIÓ A Spanish company specializing in comprehensive management for businesses and individuals, operating in the... Ovex Tech specializes in providing comprehensive BPO services and call center solutions, including inbound and outbound ... Foodsmart Dominicana, S.R.L A company operating in the food industry Specializing in flour derivative products (harina... Bomu Hospital is a social enterprise dedicated to providing access to quality healthcare for all individuals, regardless... WEISS PM: The ideal company for tailored recruitment solutions. For nearly 40 years, WEISS PM has been a trusted partner... ZSIC Life Plc is a leading assurance, savings, and wealth management company in Zambia, offering a diverse range of life... moser-spiel.at is an Austrian company specializing in the design and manufacture of outdoor play equipment and sports pa... Narteks Tekstil Sanayi ve Ticaret A.Ş., one of the well-known Turkish companies in the cotton yarn and textile industry... The attorneys at the Imbrie Law Firm practice primarily in the following counties: Brazos, Robertson, Burleson, Lee, Gri... iseg Spezialelektronik GmbH is a German company specializing in high-voltage mic…
Sources
Source
Indexed 1 month agoThis page surfaces a public ransomware disclosure indexed by Darkfield. Original posts come from the operator's own leak site; we cross-check against ransomware.live, RansomLook and RansomWatch where applicable. Share this URL freely.
