15/09/2026
π¨ Nobody hacked Bidvest Bank, EasyEquities, Peregrine Capital or Cell C this weekend.
All four still had to write to customers about a cyber incident, because a supplier they trust with your information had one.
Three of them appear to share one supplier: RelyComply, a South African platform that checks who you are when you open an account (the F**A checks). Cell C's incident involves a different supplier.
A ransomware group claims it took 200GB from RelyComply, including 92 million rows of identity data: ID numbers, dates of birth, home addresses, bank account details. That claim is unverified. The countdown on their leak site is real.
A password can be reset. Your ID number cannot, and that kind of data gets used for identity fraud for years.
If you got one of those emails π
β
Treat any call that quotes your own details back to you as the scam, even if the caller knows things only your bank should know. Hang up and phone the number on your card.
β
Apply for Protective Registration at the Southern African Fraud Prevention Service. It is free, it flags your ID to every member bank and credit provider, and you get a reference number within 48 hours.
β
Pull your free annual credit report (TransUnion or Experian) now, and again in six months.
If you run a business: could you name, today, every outside company holding your customers' ID data? Most owners cannot. That is the job we now do for clients, continuously, as an approved Panorays MSSP partner.
Full breakdown and the SAFPS link in the first comment π Please share this with anyone who got one of those emails.
https://f1itsolutions.co.za/blog/four-breach-notices-one-shared-vendor