Ahmed Al Kadi Reports Ransomware Incident Affecting IT Systems
Summary
Ahmed Al Kadi says an unauthorized third party accessed its IT environment on 18 April 2026 and ransomware encrypted part of its systems. The organization engaged specialists, notified South Africa’s Information Regulator, and warned users about follow-on scams.
Key points
- The organization says the incident occurred on 18 April 2026.
- Its investigation found that an unauthorized third party accessed its IT environment and deployed ransomware that encrypted part of the systems.
- External cybersecurity and forensic specialists were engaged, and an incident response team was established.
- The organization says it strengthened monitoring and security controls and is working to contain, assess, remediate, and restore its systems.
- It notified South Africa’s Information Regulator and warned users to watch for phishing, impersonation, and secondary extortion attempts.
Article Details
- Victim Organization
- Ahmed Al Kadi
- Incident Type
- Unauthorized access and ransomware deployment, encrypting part of the IT environment
- Incident Date
- 2026-04-18
- Operational Impact
- Ransomware encrypted a portion of the environment. The organization said it took steps to contain and remediate the incident and restore system integrity.
- Ransom Or Extortion
- Users were warned about possible phishing, impersonation, and secondary extortion attempts. No ransom demand or extortion claim was reported.
- Claim Status
- confirmed