John Z Black

John Z Black Apr 21, 2026 Incidents & Breaches #standard-bank #megaleak #south-africa #data-breach #financial-security

Failed negotiations have permanent consequences. Standard Bank South Africa recently transitioned from an unauthorized access incident to a public data dump of 154 million rows of SQL records.

This is what megaleak reality looks like in 2026. The hackers reportedly decided to abandon the bank and dump its clients after two weeks of negotiations broke down.

The haul is devastating. We are talking about 1.2 terabytes of exported data that includes full names, ID numbers, passport numbers, and credit card expiry dates. Standard Bank says our transactional systems are safe, but that is a small comfort when your national identity assets are circulating on the dark web for less than the price of a Bitcoin.

This is part of a broader weekend spree where over 15 million people had their financial and lifestyle data exposed. Identity thieves now have a combined library of banking PII and gym visitation logs.

For the affected clients, the perimeter has failed and the damage is un-remediable. You can rotate a card, but you cannot rotate a passport number. Once a leak hits the 154 million row stage, it ceases to be a breach and becomes a lifelong identity risk.

See the full details on which records were included in the latest daily dump.