The medusalocker ransomware group listed The Courier Guy on its data leak site on 2026-11-04. Country: ZA Sector: Transportation Domains named: thecourierguy.co.za Claim as published on the leak site: The Courier Guy (thecourierguy.co.za) is a South African courier company. The dump covers its operations: purchase orders to suppliers, staff recruitment and training records, leave schedules, shopping-centre lease renewals (Wonderpark, South Coast Mall, Growthpoint The Avenues), security SLAs, and vehicle finance documents.
OffSet7 / Dark Web / medusalocker
The Courier Guy listed by medusalocker ransomware group
- Group
- medusalocker
- Sector
- Transportation
- Country
- South Africa
- First seen
- 4 November 2026
This is a claim published by the threat group itself and has not been independently verified. OffSet7 does not host or link to any leaked data.
Monitor your company and suppliers
Get an alert the moment a ransomware group names your company or one of your suppliers.