Dark Web Intelligence @DailyDarkWeb 🇿🇦 🚨 SOUTH AFRICA: RAND MUTUAL ASSURANCE ALLEGEDLY BREACHED, 1.68M CLAIM RECORDS AND 366 GB CLAIMED A threat actor on an underground forum claims to have stolen 366 GB of data from Rand Mutual Assurance (RMA), the South African insurer that handles workplace injury and occupational disease compensation. The actor claims: * 1,683,810 claim records * 593,786 files * A $95,000 ransom demand, with a November 5, 2026 deadline before release ⚠️ Analyst Note: Compensation claims typically hold ID numbers, medical details and banking information, which makes the data valuable for fraud and targeted scams. RMA has not confirmed an incident. Unverified threat-actor claim, NOT confirmation of a breach. #DDW #DarkWeb #SouthAfrica #RandMutual #Insurance #DataBreach #Ransomware #ThreatIntelligence 8:18 AM · Oct 23, 2026 · 7,069 Views 5
Duane_Fray @DuaneFray 6h It’s been wave after wave, and being from South Africa working in Cyber Security, there are so many breaches happening that you guys are unaware of. It’s been hectic honestly lol. 1
scanner @scanner721 7h If confirmed, this is worse than a typical leak: injury claims tie medical diagnoses, employer and ID numbers to bank details in one record. That's ideal fuel for fake 'claim payout' calls. Insurers should warn claimants now that they never ask to re-verify banking by phone.
𝖷𝖸𝖬𝖸𝖷 @XYMYXX 7h If its confirmed: Working in healthcare this one hits different. injury claims are full of medical details people never chose to . you can reset a password but you cant reset your medical history.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
