Security and privacy
The Information Regulator fined FNB R1m and found a POPIA offence after its home-loan app exposed 88 applicants' details, including account numbers.
Interpol's Serengeti III arrested 1,462 cybercrime suspects in 21 countries and recovered US$105m. South Africa took part, but no local cases were listed.
Rand Mutual Assurance is investigating a hacker's claim to hold 366GB of injury-claim data on miners and metalworkers, with a ransom due in early November.
Afrihost, Xneelo and 1-Grid are responding to critical PHP2Shell flaws. Patches are out, but South African site owners still need to check exposure.
Legal Aid SA ordered password resets after fake NPA summons emails. It says no successful systems breach is known. No compromise has been confirmed.
A South African hosting client’s AI-built website was reportedly compromised within six days after an administrator password appeared in accessible code.
Ahsay released hotfixes for AhsayCBS after CVE-2026-105133 and CVE-2026-105134 were exploited in the wild. Earlier partial patches are not enough.
After GroundUp reported unsecured e-Panic data, Evolve patched quickly while Gauteng notification timeline remains contested.
TFG says its UK cyber incident has disrupted Hobbs, Whistles and Phase Eight systems. African operations are unaffected; customer-data exposure remains unknown.
Shoprite rates cyber risk critical and reports four data breaches in FY2026. Its control rating is weaker than for any other core business risk.
Check Point counted 2,086 weekly attacks per South African organisation in August, with ransomware, phishing and AI-related data exposure still prominent.
Sophos says compromised credentials caused 27% of SA ransomware incidents, while 63% of attacks encrypted data and recovery costs topped R17m.