South Africa Standard Bank reports data breach caused by employee

Standard Bank reports a data breach involving a senior employee who violated security protocols by copying client-sensitive information onto a personal device without protection. Standard Bank Group is Africa's largest bank by assets, headquartered in Johannesburg, South Africa.

The bank’s monitoring processes detected the unauthorized action, and the bank moved to contain the incident. The Information Regulator was informed, as required by South Africa’s Protection of Personal Information Act (POPIA).

Limited personal and financial information of a specific, limited group of clients in South Africa has been impacted, but no details are disclosed. Standard Bank claims that the breach did not impact client passwords or PINs, as these are not stored by the bank.

Impacted clients have received notification letters detailing the breach.

Standard Bank has initiated an investigation into the breach, which will also determine disciplinary actions against the involved employee, in compliance with regulatory and internal disciplinary frameworks.