14 April 2026 - Important update on the incident recently identified by Standard Bank involving unauthorised access to some of the personal information we hold.
On 23 March 2026, The Standard Bank of South Africa communicated that it had identified an incident involving unauthorised access to select data. The bank provided further updates to clients on 2 April 2026 and 13 April 2026.
The affected systems were internal administrative and document filing systems. Our transactional banking and core operating systems were not accessed, remain secure, and are available to all our clients and employees.
We would like to once again reassure you that we immediately took steps to secure our environment to mitigate the impact of this incident, working with external experts.
During this period, we continue to work tirelessly to engage with our clients who have been impacted. This will continue while we make meaningful progress in our investigations into the incident. Due to the nature of the incident, we have been preparing for the possibility of client and company-related data being made public, which now appears to have been published.
Protecting our clients remains our highest priority and we have, therefore, implemented a range of proactive measures, including enhanced monitoring of credit bureau activity, additional transaction monitoring and fraud detection across our platforms. Additional proactive precautionary steps continue to be implemented to further safeguard affected clients. We also encourage our clients to remain vigilant.
As a trusted financial services provider, as we proceed with the intensive investigation process, we have complied with applicable regulatory notification requirements and will continue to cooperate with the relevant authorities.
We realise that this may be concerning for our clients and our stakeholders, we wish to thank them for their patience and trust.
For more information on the incident:
Please see statement dated 23 March and 2 April .
The specific information involved may differ from person to person. Based on what we know (at this stage) the affected information involved includes:
We will notify clients directly if affected beyond the above data fields.
As a precaution, we advise all our clients to follow good practices, including but not limited to:
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
