GLOBALMalwareTransportation & LogisticsTransportationRansomwareInc RansomRansom DemandedActor NamedData Leak ThreatenedData PublishedHigh
South African Airways (Flysaa.Com)
bd_1e9556f4bbfbb8e6 · schema v1 · pii pii-v1
Full breach record for South African Airways (Flysaa.Com) →Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group INC Ransom on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Group activity: Transportation/LogisticsDiscovered: 2025-05-16
Source: Ransomware.live
Post text · scraped from the leak site
South African Airways (SAA) is a passenger and freight airline that is owned and operated by the South African government. Saa is a member of the Star Alliance network and is headquartered in Johannesburg, South Africa
Tracked as a single-filing incident — the only disclosure on record for this event so far.Unverified claimView incident
No regulatory filing corroborates this yet. If an SEC 8-K, state-AG notice, or victim statement lands, DisclosureLens will merge it into an incident and link it here.
Source provenance
- Source URL
- https://www.ransomware.live/id/c291dGggYWZyaWNhbiBhaXJ3YXlzIChmbHlzYWEuY29tKUBpbmNyYW5zb20=
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 16, 2025
- Raw hash
- 39d541dfc039149bc3b049e7798402d5b04923e41781feb8835352ce9f905daa
Reporting entity
- Name
- incransomnorm: inc_ransom
Victim entity
- Name
- South African Airways (Flysaa.Com)norm: south african airways flysaacom
- Domain
- flysaa.com
- Industry
- Transportation & Logisticsllm
What this source establishes
- Source ceiling
- A leak-site claim can't tell us: discovery date · materiality · notification · affected count · confirmed data types · compliance clock. These stay blank until a regulatory filing or victim disclosure lands.
- Attack vector
- Ransomware· inc_ransom
- Threat actor
- Inc RansomExternalFinancial
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.