BlackLocks Claims Ransomware Attack on South African Architecture Firm

Summary
BlackLocks claimed an attack on South Africa’s ARCA UNLIMITED Architects, alleging disruption and file and data encryption. The report says the claims are unconfirmed.
Key points
- The listed victim is ARCA UNLIMITED Architects, a South African professional services firm.
- The report attributes the ransomware claim to the BlackLocks threat actor.
- The group allegedly caused operational disruption and encrypted files and data.
- The monitoring record lists September 22, 2026 as the publication date and September 26, 2026 as the discovery date.
- The publisher says it cannot confirm the claims and invites an official statement from the affected organization.
Article Details
- Victim
- ARCA UNLIMITED Architects
- Claim Date
- 2026-09-22
- Encryption Status
- Encryption is reported in connection with the ransomware claim but is unconfirmed.
- Exfiltration Status
- Unknown; the source does not report whether data was exfiltrated.
- Leak Status
- A listing on the BlackLocks leak site is provided; publication or authenticity of victim data is not established.
