Internal documents belonging to The Courier Guy have appeared on the dark web. However, the company says customer information and parcel records were not involved.

According to MyBroadband, the group MedusaLocker published material linked to an August breach. The company says its main operating platforms were unaffected.

What information was exposed

The Courier Guy described the material as older administrative and financial records, mainly involving suppliers and landlords.

MedusaLocker claims the files include supplier orders, staff records and lease documents. Those claims should be distinguished from the company’s own description of the affected information.

“No customer, parcel or delivery data was involved,” The Courier Guy told MyBroadband. MyBroadband

The company said investigators identified an older file server as the likely source and isolated it.

It said no ransomware was deployed and its systems were not encrypted. The published documents appeared consistent with the August incident, rather than a new breach.

The Courier Guy also said it had informed the Information Regulator, police and suppliers. Further notifications would depend on its review of the material. MyBroadband

Separate warning over fake parcel messages

Separately, The Courier Guy has warned about scammers using its name to trick South Africans through delivery messages.

In an earlier response to MyBroadband, the company described SMSes claiming a parcel was being held. These messages direct recipients to links requesting small payments or personal information.

The company said the messages are distributed to random numbers, including people who have never used its services. Receiving one while expecting a delivery does not establish a connection to this breach. MyBroadband

How to check your delivery

The Courier Guy advises customers to track parcels directly through its official website instead of following suspicious links.

It says recipients are not asked to pay an extra fee to receive a parcel. Customers can contact its support centre on 010 222 2300 to check concerns.

Online sellers should also confirm that payment has reached their account before handing over goods. A payment screenshot alone does not confirm that the money has arrived.