Epia Financial Services listed on radar ransomware leak site

• Ransomware group: radar
• Country: United Kingdom
• Sector: Financial Services
• Announcement date: October 22, 2025

Threat actor radar claims attack on Epia Financial Services

The threat actor known as radar has announced the listing of Epia Financial Services on its leak site. This announcement, which appeared on October 22, 2025, suggests that the institution has been targeted in a cyberattack. Ransomware leak sites are frequently used by cybercriminals as a method of double extortion, where stolen data is threatened to be released publicly to pressure victims into paying a ransom. In such scenarios, the threat actor typically claims to have gained unauthorized access to an organization's internal networks to exfiltrate sensitive information.

The radar group has published a post on its leak site claiming to have targeted Epia Financial Services. According to the claim, the group gained access to the institution's networks and acquired data. The entry was created on October 22, 2025, though the group's specific claims regarding the timeline of the initial access or the breach itself are part of their public announcement on the platform.

Details regarding the alleged data breach

Regarding the specifics of the incident, there is no screenshot or detailed information available regarding the content of the allegedly leaked data. The listing does not provide specifics concerning the volume of data or the number of files involved. Furthermore, no ransom demand has been specified in the current announcement, and the exact nature of the files acquired remains unknown at this time.

• No specific data types were named in the listing.

In many ransomware incidents, the lack of immediate transparency from the threat actor makes it difficult for organizations to assess the full scope of the exposure. When a group claims to have exfiltrated data, the primary concern for the victim organization is determining whether the stolen information includes personally identifiable information (PII), financial records, or proprietary business intelligence.

About Epia Financial Services

Epia Financial Services is a financial services organization based in Windhoek, Namibia. The company provides financial consulting and services in association with local financial regulatory bodies. Given its role in the financial sector and its association with regulatory bodies, the organization handles sensitive information related to financial consulting and services within the region.

Potential risks and organizational implications

This incident may present a risk of exposure for the institution's financial records and customer information. If the data is leaked, it could lead to secondary risks such as identity theft and targeted phishing attacks for the institution's customers. Such secondary attacks often use the stolen information to gain trust during social engineering attempts, making it harder for customers to identify fraudulent communications.

The institution may face legal obligations under Namibian data protection regulations, which could impact its operational processes. Organizations operating in the financial sector must often adhere to strict compliance frameworks to ensure the privacy and integrity of client data. A breach of this nature can necessitate a transparent process regarding the potential data breach and the requirement to inform the affected parties.

While information about the radar group is limited, this incident highlights the ongoing challenges faced by financial institutions. To mitigate such risks, organizations often implement defensive measures such as multi-factor authentication, network segmentation, and continuous monitoring of their digital perimeter. Managing a potential breach requires a coordinated response that includes technical remediation, legal consultation, and clear communication strategies to maintain trust with stakeholders and regulatory authorities.