Cyber Attack & Data Breach · dailymaverick.co.za

Standard Bank confirms unauthorized access as Rootboy publishes customer-data dumps

Apr 17, 2026 · Original article ↗

Summary

Standard Bank confirmed unauthorized access to select data, and Daily Maverick reviewed a published dump containing customer details. Rootboy claims a much larger haul; the bank says core banking systems and CVVs were not affected.

Key points

Standard Bank said unauthorized access affected select data; its transactional and core operating systems remain secure and operational.
Daily Maverick reviewed part of a published 5,000-line dump and verified it included customer ID numbers, home addresses and employment details.
Rootboy published successive data packages, while the article attributes a claim of 154 million rows to the full package.
A Prinz Eugen leak-portal post claims 1.2TB was exfiltrated from internal servers during an attack on Standard Bank and Liberty; this volume remains an attributed claim.
Standard Bank said a limited number of affected clients had card numbers and expiry dates exposed, but CVVs were not impacted; it is replacing affected cards.
The bank says it has enhanced credit-bureau and transaction monitoring, added fraud detection measures, and reported the incident to authorities.
Liberty confirmed unauthorized third-party access to select data systems and said it was investigating; the article says the extent of its exposure remains unclear.

Article Details

Victim Organization: Standard Bank and Liberty
Incident Type: Unauthorized access to internal systems, followed by alleged data exfiltration and staged publication of data
Incident Date: 2026-02-27
Disclosure Date: 2026-03-23
Data Types Exposed: Customer names
Addresses
Email addresses
Phone numbers
South African ID numbers
Driver's license numbers
Passport numbers
Credit card numbers and expiry dates in a limited number of cases
Account numbers
Employee data
Customer and corporate transaction data
Affected Records: The threat actor claimed the data haul contained more than 154 million rows. Daily Maverick reported seeing a published sample of 5,000 customer-data lines.
Affected Data Size: The threat actor claimed 1.2 TB of data was exfiltrated; this figure was not independently confirmed in the article.
Operational Impact: Standard Bank said its transactional and core operating systems remained secure and operational. Liberty said its services remained unaffected and operational. Standard Bank described the affected systems as internal administrative and document filing systems.
Ransom Or Extortion: The threat actor claimed publications would intensify until a goal of 1 BTC was reached, and said negotiations with Standard Bank had been abandoned. The article does not report whether a ransom was paid.
Claim Status: confirmed