MIP Holdings Cyber Breach Exposes Data of 45 South African Insurers' Customers

• •MIP Holdings suffered a data breach affecting customers of 45 insurers.
• •Attackers accessed MIP's Jira platform using credentials from a compromised personal laptop.
• •Approximately 400,000 records were exposed, including sensitive personal information.

A cyber breach at MIP Holdings compromised personal information of customers from approximately 45 South African insurance companies. The breach occurred after attackers accessed MIP's Jira support platform, exploiting credentials obtained from an employee's personal laptop. The attackers infiltrated the system on May 25, 2026, and extracted around 400,000 records, including email addresses, cellphone numbers, and policy details. MIP Holdings confirmed that its core systems remained unaffected, but the exposed data included sensitive information visible in support tickets. The incident was reported to the Information Regulator and the Prudential Authority, with MIP notifying affected clients. The threat actor, known as 'The Gentlemen', is a ransomware group that has been active since mid-2025. MIP is currently assessing the full scope of the breach and has communicated with stakeholders regarding the incident.