South African Government Pension Data Leak Fears Spark Probe

Alleged LockBit ransomware operators claim they stole and publicly leaked 668GB of sensitive Government Pensions Administration Agency (GPAA) data, potentially impacting the South African Government Employees Pension Fund (GEPF) which covers ~1.2M employees and ~473k pensioners; GPAA says it acted to secure systems and is investigating, while observers note the claim may relate to an earlier Feb.16 incident and follows law enforcement disruption of LockBit (Operation Cronos). The report provides context on LockBit's rapid adaptation, likely tactics (account compromise and public-facing app vulnerabilities), potential impact, and recommended mitigations such as MFA, tested backups, endpoint detection, and securing management interfaces.