Itweb.Co.Za Rand Mutual Assurance Investigates Alleged Data Breach Affecting 1.68M Claims
Article Content
- •RMA is investigating a potential breach involving 1.68 million claims records.
- •A ransom of $95,000 has been demanded by the threat actor, with a deadline of November 5, 2026.
- •The investigation is ongoing, and RMA has not yet confirmed if any data was accessed.
Rand Mutual Assurance (RMA) is investigating a potential cyber security breach after a threat actor claimed to have stolen 366GB of data, including 1.68 million claims records and 593,786 files. The actor is demanding a ransom of $95,000, with a deadline of November 5, 2026, for the data's release. RMA has not confirmed whether a breach occurred or if any information was accessed without authorization. The investigation began following an alert received on October 23, 2026. Dark Web Intelligence reported the incident, noting that the claims data could contain sensitive personal information, raising concerns about identity fraud and financial scams. RMA is currently assessing the situation to determine the extent of the incident and will provide updates as the investigation progresses. This incident follows a series of cyber security issues in South Africa's insurance sector.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track The Gentlemen and Guardrisk in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Has RMA confirmed the breach?
What type of data is allegedly involved?
What should affected individuals do?
Continue Reading
Hackers Exploit Firewalls, Compromise 70,000 Credentials Globally A large-scale cyber campaign has targeted exposed network edge devices, specifically Fortinet FortiGate and Palo Alto Networks GlobalProtect firewalls, leading to the compromise of over 70,000 credentials. The threat actor, known as k0t, has been active since October 2025 and is linked to ransomware groups like Qilin… 
Ransomware Groups Exploit PAN-OS Flaw, Target Critical Infrastructure Ransomware groups, including Qilin and INC, are exploiting a critical authentication bypass vulnerability (CVE-2026-0257) in Palo Alto Networks' PAN-OS GlobalProtect and Prisma Access. This flaw allows attackers to establish unauthorized VPN sessions, bypassing multifactor authentication controls. Since its disclosure…