CKR Consulting Engineers
Attack Intelligence
CKR Consulting Engineers was compromised in a ransomware attack attributed to payload in July 2026. The organization, operating in the Business Services sector in South Africa, was added to the group's data leak site as part of an extortion campaign.
payload operates as a financially motivated ransomware-as-a-service (RaaS) operation, exfiltrating sensitive data and threatening public disclosure to pressure victims into paying ransom demands.
CKR Consulting Engineers is a prominent South African engineering consultancy firm headquartered in Johannesburg, established under its current name in 2001. The company provides comprehensive multi-disciplinary services, specializing in electrical, electronic, mechanical, renewable energy, and civil engineering.