Everest Claims Ransomware Incident at South Africa’s Morula IVF

Summary

A ransomware.live post attributes an incident affecting Morula IVF’s healthcare network and services to Everest. The post cites the group’s leak site and says the claim could not be independently confirmed.

Key points

• The post attributes a ransomware incident involving Morula IVF to the Everest group.
• It says the incident affected the clinic network’s healthcare services in South Africa.
• The record lists discovery on September 25, 2026, and publication shortly before that.
• The cited source is Everest’s leak site at everestndkvzcibcje2cqxhre2hmmybl3rn2gwzwsblz7gx6uryn5rad[.]onion.
• The post says the information is based on the group’s public claims and that its accuracy could not be confirmed. No official statement from Morula IVF is included.

Threat Actors

Countries

Industries

Related Articles

• Everest Claims Ransomware Attack on Securitas Group in SwedenEverest
• AhnLab’s August 2026 Ransomware Report Details Victim Trends and Major AttacksEverest
• Cyble Report Highlights Ransomware, Access Sales and Vulnerability Risks in QatarEverest
• July 2026 Ransomware Report Finds Manufacturing Most Affected as New Groups EmergeEverest
• July 2026 Report Details Malware, Phishing and Data-Leak Risks in the Financial SectorEverest