South Africa’s ATNS Investigates Ransomware Attack and Possible Data Exfiltration
Summary
South Africa’s Air Traffic and Navigation Services is investigating a ransomware attack that could have disrupted commercial aviation. The probe is examining possible data exfiltration to IP addresses in China and potential employee involvement.
Key points
- ATNS was targeted in a ransomware attack.
- The attack could have disrupted commercial aviation operations in South Africa.
- A forensic investigation is examining the attack’s origin and the extent of the damage.
- Investigators are assessing whether data was exfiltrated to IP addresses in China.
- ATNS is also investigating possible employee involvement and whether personal information was accessed unlawfully.
Article Details
- Victim Organization
- Air Traffic and Navigation Services (ATNS)
- Victim Domain
- atns.co.za
- Incident Type
- Ransomware cyberattack
- Disclosure Date
- 2026-09-26
- Data Types Exposed
- Personal information (possible access is under investigation)
- Operational Impact
- The attack could have disrupted commercial aviation operations in South Africa; disruption is not confirmed.
- Ransom Or Extortion
- Ransomware attack reported; no ransom demand or extortion details are provided.
- Claim Status
- confirmed
Countries
ChinaThe forensic probe is also examining possible data exfiltration to IP addresses in China and whether employees may have collaborated with the attackers or accessed personal information illegally.South AfricaAir Traffic and Navigation Services (ATNS) is investigating a ransomware attack that could have disrupted commercial aviation operations in South Africa.