Ransom! Climatron

Incransom, a threat actor, has claimed to have compromised Climatron, an HVAC equipment company based in South Africa, and obtained sensitive bank payment data, tax records, and technical documentation. The impacted country is #SouthAfrica.

Incident Details

  • Victim: Climatron
  • Country: ZA
  • Actor: incransom
  • Source: http://incblog6qu4y4mm4zvw5nrmue6qbwtgjsxpw6b7ixzssu36tsajldoad.onion/blog/disclosures/68d97b2cfa0b6f4bdf677fd7
  • Discovered: 2025-10-01 12:54:36.281842
  • Published: 2025-10-01 12:00:00.000000

Information

  • Ransomware attack on Climatron, an HVAC equipment company in South Africa.
  • Perpetrated by the actor incransom.
  • Stolen data includes bank payment information, tax records, and technical documentation.

Disclaimer: This post is based on public claims made by the ransomware group "incransom". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live