Zimbabwean ZB Financial Holdings hit by ransomware, data leaked
Learn More
ZB Financial Holdings, a major financial institution in Zimbabwe, was hit by a ransomware attack by a group identified as "Mad Liberator."
The hackers exfiltrated extensive data and, following ZB’s refusal to pay the demanded ransom, leaked the stolen data on the dark web. This data spans from at least 2017 to July 2024, with files as recent as July 2024.
The attack caused significant issues in ZB's systems. ZB reported technical issues on 16th of July, followed by a statement on July 23 claiming a return to normal operations.
The leaked data, amounting to gigabytes, includes:
- Consumer customer data
- Business customer data
- Employee data
- Account applications
- Various other operational data
Multiple institutions were impacted by this attack, including:
- South African Cities Network (South Africa)
- Crosswear Trading (UK)
- Montero & Segura Procuradores Asociados (Spain)
- Ministero della cultura (Italy)
- Vitaldent (Spain)
The number of affected individuals is not disclosed.