Standard Bank and Liberty Holdings: 1.2 TB claim with 154 million SQL rows

<p>On 16 April 2026, a forum user published to have obtained access to data belonging to <strong>Standard Bank Group</strong>, South Africa on a hacking forum. The claimed dataset contains approximately <strong>154,000,000</strong> records. Sample data was published alongside the claim, providing corroborating evidence of the breach.</p> <h2>What the source reveals</h2> <p>An actor claims to have accessed Standard Bank and Liberty Holdings systems for over three weeks, exfiltrating 1.2 TB of data including 154 million rows of SQL.</p> <h2>Risks</h2> <ul> <li>Financial fraud using compromised account information and transaction records</li> <li>Regulatory investigation into the organisation's data protection compliance by financial authorities</li> <li>Money laundering risks if customer due diligence documentation was compromised</li> <li>Unauthorised access to sensitive organisational data that could be used for follow-on attacks</li> <li>Competitive intelligence loss if proprietary business information or trade secrets were exposed</li> <li>Reputational damage and erosion of customer, citizen, or stakeholder trust in the affected organisation</li> <li>Legal liability and regulatory fines under applicable data protection frameworks</li> </ul> <h2>What remains unknown</h2> <ul> <li>the total volume of data compromised and whether it includes additional categories beyond those disclosed</li> <li>the method by which the data was obtained - whether through a direct database compromise, an insecure API, or a third-party breach</li> <li>whether the data has been sold or distributed to additional parties beyond the forum post</li> </ul> <h2>Conclusion</h2> <p>This incident confirms that Standard Bank Group's data has been compromised and is circulating on underground forums. Financial institutions are prime targets for data thieves seeking information that can facilitate fraud. Affected individuals should monitor their accounts for suspicious activity and consider placing fraud alerts with credit bureaus.</p>