Samwumed, based in South Africa (KR), was targeted by thegentlemen with a ransomware claim against its operations tied to samwumed.org and zoominfo.com/c/samwumed/346685548. #SouthAfrica
Incident Details
- Victim: Samwumed
- Sector: Healthcare
- Country: KR
- Actor: thegentlemen
- Source:
- Discovered: 2026-09-30T03:40:29.255324+00:00
- Published: 2026-09-29T14:40:29+00:00
Information
- Closed, self-administered medical aid scheme founded in 1952 and based in Cape Town
- Serves South African municipal workers, with about 35,000 members and 73,000 covered lives
- Generates around R1.9 billion per year in contributions and holds reserves of more than R1.3 billion
- Reported a R14.3 million surplus in 2024, with solvency at 68% versus a 25% legal minimum
- Offers income-banded, low-cost plans starting at about R750 per month with a 60% employer subsidy
- Covers hospital care, doctors, medication, dentistry, and optics
- Led by Principal Officer Francina Mosoeu with a union-appointed board, and administers benefits with Medscheme across private hospital groups
- Facing a membership decline of about 15% per year as younger members leave
- Involved in an ongoing court dispute with the Melomed hospital group over contract exclusions
- Also faces long-term uncertainty from national health insurance reform
Disclaimer: This post is based on public claims made by the ransomware group "thegentlemen". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.