Threat actor Krybit claims to have breached Megasurf.co.za, a South African internet service provider and data center operator. The claim includes data exfiltration and ransom demands against Megasurf and its customers in South Africa. #SouthAfrica
Incident Details
- Victim: megasurf.co.za
- Sector: Consumer Services
- Country: ZA
- Actor: krybit
- Source: http://krybitqsdzwmhnitvwuhvsntfgf2wrhxveyxroxpc44c6gkft2cqldyd.onion/blog/0f09749244704dd7eda6e563ddd286eb4bd7ab0138dfefbc93a237c6179c0b21/
- Discovered: 2026-04-09 21:35:03.730720
- Published: 2026-04-09 21:34:46.198584
Information
- Ransomware actor Krybit claimed responsibility for the attack.
- Megasurf is an internet service provider and data center operator specializing in high-speed fibre and wireless internet.
- The company provides hosting, connectivity, and data center services via its megasurf.co.za platform.

Disclaimer: This post is based on public claims made by the ransomware group "krybit". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.