Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us
Logo

Europ Assistance South Africa

europassistance.co.za
Group Thegentlemen
Discovered 2026-10-16 09:31 UTC
Est. attack date 2026-10-14
Country ZA
Sector
Agriculture and Food Production Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Description:

europassistance.co.za Europ Assistance South Africa South African emergency-assistance and insurance-administration company founded 1984 in Roodepoort, Gauteng — ~500 staff, FSCA licensed (FSP 5001), Level 1 B-BBEE, handling 1.3M calls/yr through 8,000+ providers. Key structural change: it completed a management buyout from French parent Europ Assistance (Generali Group) in late 2023 and rebranded to AZOZA in Oct 2025 — no longer part of the global Europ Assistance network (which itself merged into Generali's Redion platform in 2026). Services: roadside assistance, home emergency callouts, travel/motor claims administration, funeral cover, and white-label BPO for underwriters (Regent, Old Mutual, ABSA, Santam, Profmed, BMW, Eqstra). Led by CEO Lynette Mutsekwa (since 2023), CCO Nelson Soares. Reputation is split: B2B clients and 8,000 supplier-partners rate them well (12–20-year relationships)
Infostealer activity detected by HudsonRock

Compromised Employees: 6

Compromised Users: 78

Third Party Employee Credentials: 11

External Attack Surface: 19

Exposure Report
by ParanoidLab
1470
Passwords
60 critical
14
Cookies
0 critical
Last queried 2026-10-16 09:31 UTC

DNS Records:

The following DNS records were found for the victim's domain.

WHOIS Emails
  • No emails found.
MX Records
  • europassistance-co-za.mail.protection.outlook.com. Microsoft 365
TXT Records
  • v=spf1 include:_netblocks.mimecast.com ip4:74.125.133.27 ip4:74.125.133.26 ip4:94.124.69.81 a:malesherbes.generali.fr a:miromesnil.generali.fr include:spf.protection.outlook.com include:spf.mbsrvs.com -all
  • MS=ms18790248
  • MS=B9B02A33A989CC39910B8C529A40A59E10D95579
  • MS=ms96761699
Cloud / SaaS Services Detected
Microsoft 365 Mimecast

Legal Disclaimer: Ransomware.live does not engage in the acquisition, exfiltration, downloading, possession, hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data. This platform indexes only publicly visible information posted by ransomware operators and open web sources without accessing or obtaining the underlying stolen content. The service is provided to support public awareness, legitimate research, and cyber-resilience. No stolen personal or confidential data is collected or distributed via this site.