Ransomware claim: The Courier Guy (medusalocker)

The Courier Guy (thecourierguy.co.za) is a South African courier company. The dump covers its operations: purchase orders to suppliers, staff recruitment and training records, leave schedules, shopping-centre lease renewals (Wonderpark, South Coast Mall, Growthpoint The Avenues), security SLAs, and vehicle finance documents.

  • Group: medusalocker
  • Country: ZA
  • Sector: Transportation
  • Discovered: 2026-11-04 22:18 UTC
  • Attack date: 2026-11-04 22:18 UTC

This entry reflects a claim published by an extortion group and collected by a public tracker. It has not been independently verified.

Source: ransomware.live — Recent Victims · 2026-11-04