The NightSpire ransomware group has allegedly added a South African government entity to its leak site, the Eastern Cape Department of Human Settlements.
According to the post, the breach reportedly occurred on November 5, 2025, with a scheduled data leak for November 30, 2025. The attackers claim to have exfiltrated 20GB of data, though no samples or proof-of-leak have been made public.
The department is responsible for housing development and community infrastructure in South Africa’s Eastern Cape province. A breach of this nature could potentially expose sensitive personal and operational data related to housing beneficiaries, contractors, and internal communications.
Disclaimer: This report is based on claims made by the NightSpire ransomware group on its dark web leak site. CyHawk Africa has not independently verified the authenticity or scope of the alleged breach. The information is shared solely for cyber threat intelligence and awareness purposes.

