ETFSA
incransomThis record tracks a ransomware attack claimed by the incransom group against ETFSA. It collects the publicly disclosed attack details — sector, location and timeline — as published on the operator's leak site and indexed by Breach House.
Window Zero
EXPOSURE GAPWindow Zero is the time the breach stayed in the open before anyone said so — the gap between when the attack was first discovered on the operator's leak site (t1) and when it was publicly disclosed (t2). The wider this window, the longer victims, staff and customers were exposed with no warning.
Attack Summary
ETFSA.co.za is a South African financial services platform specializing in exchange-traded funds (ETFs). It offers a wide range of investment options, allowing individuals to invest in various sectors, indices, and asset classes through low-cost, diversified ETFs. The platform provides educational resources, investment solutions, and tools to help investors manage their portfolios effectively. ETFSA also supports tax-free savings accounts (TFSA) and retirement accounts, making it accessible for long-term wealth building ETFSA.co.za became the target of a cyberattack, and all confidential and personal client data will be published soon. Mike Brown did not worry about the security of his clients' data; he had the opportunity to ensure the safety of such sensitive data, but he preferred to stay on the sidelines. +27 82 653 5645 (m) Mike Brown
Leak Screenshots
SAMPLEProof-of-breach screenshots the operator posted from the stolen data. Previews are redacted and locked — the originals are available on HaveIBeenRansom.