Epia Financial Services Listed by radar Ransomware Group: Ransomware Claim — What’s Alleged & What To Do

Epia Financial Services, a Namibia-based firm, was listed by the ransomware group radar on or around 11 September 2025. Public reporting states that internal files were exfiltrated in a ransomware attack; the number of people affected remains unknown and further technical detail has not been released.

The listing itself is a claim by the group. Until independent confirmation appears, the precise scope, timing of intrusion, and full contents of any stolen material stay limited to what has been stated so far. For clients, partners and staff the practical concern is straightforward: internal business files from a financial-services organisation can contain personal and commercial data that, if misused, create lasting risk.

Inside the incident

According to the available record, Epia Financial Services was named on radar’s leak site in connection with a ransomware attack that involved the exfiltration of internal files. The report date is 11 September 2025. No public figure has been given for the volume of data taken, the number of systems affected, or the exact date the intrusion began. Method of initial access, encryption status of systems, and any ransom demand are undisclosed.

Contact and location details associated with the organisation in open sources include a Windhoek address (No 17 Eulenweg Street, Hochland Park), the email info@epiafs.com and a telephone number. The firm is also listed alongside partners such as NAMRA, NAMFISA, NBWPF and CIFNAMIBIA. None of these details confirm the scale of the breach; they simply situate the organisation that radar claims to have hit.

Who is radar?

Radar is a ransomware group that operates in the double-extortion model common among contemporary cyber-criminal crews: data is stolen and systems may be encrypted, after which the group threatens to publish the material unless a payment is made. Like other actors of this type, radar maintains a leak site where it posts victim names and, in some cases, samples or full archives of stolen files. Public reporting on the group’s prior activity shows a pattern of targeting organisations across multiple sectors and geographies, then using the threat of disclosure to pressure payment.

In this instance the group claims Epia Financial Services as a victim and asserts that internal files were exfiltrated. That claim has not been independently verified in the material provided; it should be treated as an unverified assertion until further evidence appears. No statements attributed specifically to radar about the contents of Epia’s files beyond the general description “internal files” are available in the record.

About Epia Financial Services

Epia Financial Services operates in Namibia’s financial sector from its address in Hochland Park, Windhoek. Organisations of this kind typically provide financial products, advisory or intermediary services and therefore handle client identity data, account or transaction records, correspondence, and internal commercial documents. Public association with bodies such as NAMRA and NAMFISA indicates the firm works within a regulated environment where compliance and data-protection obligations apply.

A breach at a financial-services provider is consequential because the data such firms hold is both sensitive and reusable. Identity documents, contact details, financial histories and contractual information can be exploited for fraud, social engineering or further targeting of clients and partners. Even when the exact files remain unconfirmed, the sector context alone elevates the potential impact.

What data was at risk

The only data type named in the available facts is “internal files exfiltrated in ransomware attack.” No inventory of file names, databases or record counts has been published. Exact contents are therefore unconfirmed.

Financial-services organisations commonly hold the following categories of information; whether any of them were present in the material radar claims to possess is not established:

• Client identity and contact records
• Account, transaction or product documentation
• Internal correspondence and operational files
• Partner or regulatory correspondence
• Employee or contractor personal data

Until a verified disclosure or official statement appears, these remain typical holdings rather than confirmed exposures.

The real-world impact

For individuals whose information may have been among the internal files, the concrete risks include identity fraud, phishing that references genuine personal or account details, and unsolicited contact that appears legitimate because it draws on real data. Financial records, even partial ones, can be combined with other leaked material to open accounts or authorise transactions in someone else’s name. The number of people affected is unknown, so the breadth of this exposure cannot yet be measured.

For the organisation the consequences include potential regulatory scrutiny under Namibian financial and data-protection rules, loss of client trust, and the operational cost of investigation, notification and remediation. Partners named alongside Epia may also face secondary questions about shared data flows. None of these outcomes require assuming negligence; they follow from the nature of the data a financial firm holds and the fact that a ransomware group has claimed possession of internal files.

If your data was in this claimed breach

If you have been a client, employee or partner of Epia Financial Services, treat the possibility of exposure seriously even while details remain limited. Practical first steps include monitoring bank and credit accounts for unexpected activity, changing passwords on any accounts that reused credentials linked to the firm, and being alert to phishing or phone calls that reference personal or financial details you have shared with Epia. Consider placing fraud alerts with relevant credit bureaux if available in your jurisdiction.

You can also run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets. Keep records of any suspicious contact and report confirmed fraud to local authorities and your financial institutions promptly. Official updates from Epia or Namibian regulators, if issued, should be followed for any further guidance specific to this incident.

AICompiled with AI assistance from public sources and published under our editorial standards.