In July 2021, Transnet SOC Ltd., a South Africa-based state-owned logistics company, fell victim to a ransomware cyber-attack executed by the Blackmatter ransomware group using Death Kitty ransomware. The attack crippled critical systems, including the NAVIS System, rendering computer operations unusable. The consequences were severe: port operations halted entirely, preventing cargo movement, while the company’s website went offline. Employees were forced to revert to manual paper-based processes, causing significant operational disruptions. The attack was financially motivated, with the threat actors seeking ransom payments. The outage had cascading effects on South Africa’s supply chain, trade, and economy, given Transnet’s pivotal role in managing the country’s ports, rail, and pipelines. The incident underscored the vulnerability of critical infrastructure to cyber threats and the potential for ransomware to paralyze large-scale industrial operations.