<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"><channel><title>South Africa Cyber Watch</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/</link><description>Sourced cyber incidents and official statements, from pwnsy Cyber Watch.</description><language>en</language><lastBuildDate>Sun, 08 Nov 2026 00:00:00 +0000</lastBuildDate><item><title>First National Bank (FNB): Data leak (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">1dcc4b595cee1f09</guid><pubDate>Mon, 26 Oct 2026 00:00:00 +0000</pubDate><description>The Information Regulator said FNB filed a security compromise notification after customer account numbers were exposed through its digital home loan application platform, and fined the bank R1 million for weak safeguards. Sources: https://inforegulator.org.za/wp-content/uploads/2026/10/MEDIA-STATEMENT-REGULATOR-FINES-CJC-AND-FNB-FOR-POPIA-CONTRAVENTION.pdf</description></item><item><title>South Africa statement: The Information Regulator fined FNB R1 million and Central Johannesburg TVET College R500,000 for POPIA contra</title><link>https://inforegulator.org.za/wp-content/uploads/2026/10/MEDIA-STATEMENT-REGULATOR-FINES-CJC-AND-FNB-FOR-POPIA-CONTRAVENTION.pdf</link><guid isPermaLink="false">76994577f83d3c2d</guid><pubDate>Mon, 26 Oct 2026 00:00:00 +0000</pubDate><description>The Information Regulator fined FNB R1 million and Central Johannesburg TVET College R500,000 for POPIA contraventions.</description></item><item><title>Hollard: Data leak (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">8933c93c694ff521</guid><pubDate>Mon, 07 Sep 2026 00:00:00 +0000</pubDate><description>MIP linked the Hollard material to its June breach. Hollard refused to pay and says its own systems were not compromised. The Gentlemen listed Hollard and published funeral policyholders&#x27; details. Sources: https://techcentral.co.za/ransomware-gang-south-african-client-data-legalwise-samwumed-edcon/286877/, https://www.ransomware.live/id/SG9sbGFyZCBJbnN1cmFuY2UgR3JvdXBAdGhlZ2VudGxlbWVu</description></item><item><title>Full story: MIP Holdings breach exposes clients of about 45 insurers</title><link>https://pwnsy.com/tools/cyber-watch/incidents/mip-hollard-insurance-breach/</link><guid isPermaLink="false">c3d10832b8e77e36</guid><pubDate>Mon, 07 Sep 2026 00:00:00 +0000</pubDate><description>Insurance software firm MIP paid The Gentlemen a ransom after a 2026 breach. The gang still leaked Hollard funeral policyholder data.</description></item><item><title>Rand Water: Intrusion (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">6eb6170a49bbb652</guid><pubDate>Thu, 03 Sep 2026 00:00:00 +0000</pubDate><description>Rand Water told debt holders it was responding to an incident affecting some IT systems. It said water treatment and supply were unaffected and treasury ran from a disaster recovery environment. Sources: https://techcentral.co.za/rand-water-cyberattack/285746/</description></item><item><title>MIP Holdings: Data leak (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">5e45ea0819e08524</guid><pubDate>Fri, 26 Jun 2026 00:00:00 +0000</pubDate><description>Insurance software supplier MIP confirmed attackers used reused staff credentials to reach a support platform and took about 400,000 records tied to some 45 insurers. MIP paid a ransom, and data was published anyway. Sources: https://techcentral.co.za/ransomware-gang-south-african-client-data-legalwise-samwumed-edcon/286877/</description></item><item><title>AVBOB: Intrusion (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">87a6c596b862bcd6</guid><pubDate>Mon, 08 Jun 2026 00:00:00 +0000</pubDate><description>The funeral insurer confirmed that external attackers disrupted its digital platforms. Branches stayed open and worked manually. Sources: https://iol.co.za/business/2026-06-08-cyber-attack-hits-avbob-as-systems-go-offline/</description></item><item><title>South Africa statement: The Information Regulator said the Polokwane High Court confirmed a POPIA fine on Blouberg Local Municipality,</title><link>https://inforegulator.org.za/wp-content/uploads/2026/04/INFORMATION-REGULATOR-TURNS-TO-THE-COURTS-TO-FINE-BLOUBERG-LOCAL-MUNICIPALITY-FOR-CONTRAVENTION-OF-POPIA_.pdf</link><guid isPermaLink="false">7c4928903ad11cf4</guid><pubDate>Wed, 29 Apr 2026 00:00:00 +0000</pubDate><description>The Information Regulator said the Polokwane High Court confirmed a POPIA fine on Blouberg Local Municipality, reduced to R250,000, for publishing a staff member&#x27;s personal information online.</description></item><item><title>Statistics South Africa: Ransomware (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">7f6f6d1e22a471c8</guid><pubDate>Mon, 30 Mar 2026 00:00:00 +0000</pubDate><description>Stats SA confirmed a breach of the HR database used by job applicants and said it would not pay and would notify the Information Regulator. XP95 claimed 154GB from Stats SA and demanded about R1.7 million. Sources: https://www.itweb.co.za/article/stats-sa-confirms-data-breach-as-hackers-demand-r17m-ransom/JBwErvn3wpo76Db2</description></item><item><title>Standard Bank: Data leak (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">bd9f827c3d3ca3c8</guid><pubDate>Mon, 23 Mar 2026 00:00:00 +0000</pubDate><description>Standard Bank disclosed unauthorised access to internal administrative and filing systems, and on 14 April said client data had been published online. Subsidiary Liberty disclosed its own breach a day after the first notice. An actor called Rootboy claimed 1.2TB of data on a dark web forum. Sources: https://www.connectingafrica.com/cybersecurity/standard-bank-customer-data-leaked-online, https://www.timeslive.co.za/news/south-africa/2026-04-17-standard-bank-advises-customers-to-tighten-security-after-hack-attack/</description></item><item><title>Land Bank: Ransomware (Confirmed)</title><link>https://pwnsy.com/tools/cyber-watch/south-africa/#all</link><guid isPermaLink="false">7d50bd52b9362625</guid><pubDate>Mon, 09 Mar 2026 00:00:00 +0000</pubDate><description>Finance Minister Enoch Godongwana told Parliament that attackers entered through an internet-facing server on 12 January and encrypted part of the server environment. The bank refused a five Bitcoin ransom and said farmer data was not compromised. Sources: https://briefly.co.za/south-africa/237092-ransomware-attack-land-bank-hackers-demand-r54-million-confirms-godongwana</description></item></channel></rss>
