Fidelity Pension Managers Listed by Deadlock Ransomware Group: Ransomware Claim — What’s Alleged & What To Do
Fidelity Pension Managers was listed by the Deadlock ransomware group on June 15, 2026, after internal files were exfiltrated in a ransomware attack affecting an undisclosed number of people. Individuals are advised to check whether their data may be involved and to monitor their accounts for any unusual activity.
What happened
The incident came to public attention when Deadlock listed Fidelity Pension Managers Limited on its data-leak site on 15 June 2026. The group claims to have exfiltrated internal files during a ransomware attack. No confirmation of the claim has been issued by the company or by PenCom, Nigeria’s pension regulator. The number of people whose information may be involved, the volume of data taken, and the timeline of the intrusion are not publicly known.
Who is Deadlock?
Deadlock is a ransomware operation that publicly lists victim organisations on a dedicated leak site after encrypting systems and copying files. The group’s pattern, documented in multiple prior incidents, involves demanding payment in exchange for not publishing stolen material. Its listing of Fidelity Pension Managers constitutes an unverified claim by the group; no independent verification of the data or the attack has been released.
About Fidelity Pension Managers
Fidelity Pension Managers Limited is a licensed Pension Fund Administrator regulated by PenCom. Established in 2004, it manages retirement savings accounts and provides investment portfolio services to contributors in Nigeria. The firm also operates digital platforms, including the iPension portal and FidApp Plus, that allow members to view balances and make contributions. Organisations of this type routinely process sensitive personal identifiers, contribution histories, and banking details required for pension administration.
What data was at risk
The only detail released is that internal files were allegedly exfiltrated. The exact categories of information contained in those files have not been disclosed. Pension administrators typically hold names, addresses, dates of birth, national identification numbers, contribution records, and bank account details linked to retirement savings accounts, but it is not confirmed whether any of these data types were among the material taken.
What's at stake
Exposure of pension-related records can lead to identity theft, fraudulent account access, or targeted scams directed at retirees and contributors. For the organisation, the incident raises questions about the security of systems that store long-term financial data subject to regulatory oversight. Both the scale of potential harm and the organisation’s response remain unknown because key facts have not been published.
If your data was in this claimed breach
Individuals concerned about possible exposure should begin with basic protective steps while awaiting official statements from Fidelity Pension Managers or PenCom. Concrete actions include:
- Monitor bank and pension statements for unusual activity.
- Enable multi-factor authentication on any associated online accounts.
- Request a free credit or identity report from available Nigerian services.
- Run a free exposure scan of your email address against known breach datasets to check for prior appearances of your information.
AICompiled with AI assistance from public sources and published under our editorial standards.
How this breach connects
More recent breaches
CNA Listed by Deadlock Ransomware GroupAnidaport Listed by Deadlock Ransomware GroupIFC Eur Listed by Deadlock Ransomware GroupZhangjiagang Fortune Chemical Co. Ltd. Singapore Listed by Deadlock Ransomware GroupLatest breaches
Publicly posted by deadlock — unverified claim, pending independent verification
Breach listings — particularly those originating from ransomware or leak sites — are third-party claims that may be unverified, incomplete, or inaccurate. A listing does not by itself confirm that a breach occurred or that any specific data was exposed. Severity is an automated assessment, not a definitive rating. Verification status is shown where available.
Attributions to threat groups and methods reflect public reporting and, in some cases, unverified claims made by the groups themselves; they may be incomplete or later revised. Recent Breaches and GalaxyWarden are independent and are not affiliated with, and do not endorse, any company or group named on this page. This information is aggregated from public sources for awareness only and is not legal, security, or investment advice.