The threat actor payload claims that United Finance Egypt’s entire infrastructure has been compromised in a ransomware incident. The majority of the leaked data consists of the company’s customer information from its financing, leases, factoring, and mortgage lending operations #Egypt
Incident Details
- Victim: United Finance Egypt
- Sector: Financial Services
- Country: EG
- Actor: payload
- Source: http://payloadrz5yw227brtbvdqpnlhq3rdcdekdnn3rgucbcdeawq2v6vuyd.onion/posts/ad284bf3-0789-4d98-a7d0-4810f027bda0
- Discovered: 2026-04-03 01:06:08.347667
- Published: 2026-04-03 01:05:44.478003
Information
- United Finance Egypt is an Egyptian non-bank financial institution (NBFI) providing financing services for businesses and real estate.
- Operations include financial and operating leases, factoring, and mortgage lending.
- The data breach impacts the company’s entire infrastructure.
- The majority of leaked records are customer information.
- Attributed actor: payload.

Disclaimer: This post is based on public claims made by the ransomware group "payload". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.