Incransom Claims Reatile Group as Ransomware Victim in South Africa

Summary
Ransomware.live lists Reatile Group (reatile[.]co[.]za) as a July 2026 victim claimed by incransom. The post alleges operational disruption but says the group’s claims are unconfirmed.
Key points
- The monitored record identifies Reatile Group, associated with reatile[.]co[.]za, as the named victim.
- The record attributes the ransomware claim to incransom and links to the actor’s disclosure listing.
- The post alleges disruption to the company’s operations but provides no independent confirmation.
- The record gives July 18, 2026, as the discovery and publication date.
Article Details
- Victim
- Reatile Group
- Victim Domain
- reatile.co.za
- Claim Date
- 2026-07-18
- Encryption Status
- Unknown
- Encrypted Size
- Unknown
- Exfiltration Status
- Unknown
- Exfiltrated Data
- Not disclosed
- Exfiltrated Size
- Unknown
- Ransom Demand
- Unknown
- Leak Status
- A public ransomware-group disclosure/claim is reported; its accuracy is unconfirmed.
Threat Actors
Countries
Industries
Energythe operations of Reatile Group, a South African black-owned investment holding company focused on the energy, petrochemical, and industrial sectors.IndustrialGroup, a South African black-owned investment holding company focused on the energy, petrochemical, and industrial sectors.Petrochemicalof Reatile Group, a South African black-owned investment holding company focused on the energy, petrochemical, and industrial sectors.
