# Non-state data-owner financial ranking — Npontu engagement
Date: 2026-08-14. Method: public OSINT (GSE results, financial press).
State-owned (GoG BDR, Electoral Commission, Bank of Ghana) excluded by the
question. CONFIRMED = sourced; PROBABLE = estimate.

## Ranking (financially strongest non-state data owner first)

### 1. GCB Bank PLC — STRONGEST (by far)
- Ghana's largest indigenous bank, GSE-listed. "Barometer of the local banking
  sector" (Databank Research). Shares +~200% in 2025. Systemic bank, assets
  in the billions of GHS.
- Data we hold: gcb_crm customer_requests (modest, not core banking).
- Leverage note: financially heaviest, but big enough to NOT pay quietly
  (legal/compliance + BoG obligations) — high weight, low quiet-payment odds.

### 2. Letshego Ghana Savings & Loans PLC — strong, listed, most exposed
- H1-2026 profit GH¢88M (~USD 7M), balance sheet GH¢1.9B (~USD 150M),
  deposits GH¢834M. GSE-listed; parent Letshego Africa Holdings (Botswana).
- Data we hold: tottot_npontu + tottot_letshego FULL loan book (7.78M penalty
  apps, full-KYC applications, live USSD journeys) + kowri disbursement rail.
- Why it matters: deepest data exposure AND big enough to pay but small enough
  to feel existential reputational pain. BoG-regulated non-bank.
- Leverage note: best (sensitivity x ability-to-pay x regulator-fear) ratio.
  Strongest candidate for the named banking victim.

### 3. ABSA Bank Ghana — large group, least exposed
- Subsidiary of Absa Group (JSE-listed, one of Africa's largest banks).
- Data we hold: only the ABSA USSD registration portal (msisdn/names/emails),
  on isolated host 138.201.221.144 — NOT exfiltrated (DB local). Thin data.

### 4. Kowri (credit gateway) — fintech, smaller
- Private, no public financials. We hold full kowri_credit_gateway (clients +
  momo disbursement transactions). Modest weight.

### 5. Pharmacy chains (topup, derby business x2, lena, express_care) — SMEs
- Private retail chains, no public financials. We hold full ERPs. Small weight.

## Answer
- Most financially successful NON-STATE data owner = **GCB Bank PLC** (largest
  indigenous bank, strongest balance sheet).
- Best *ransom-leverage* non-state victim = **Letshego Ghana** — big enough to
  pay, regulated enough to fear disclosure, and we hold its live loan book
  (deepest operational exposure of any client).
