16/09/2026
Four suppliers. Four exposures. None of them yours, all of them your problem.
The table is illustrative, but the shape of it is not. A payroll bureau leaks staff records. Nobody tells you, because nobody told them. Three months later a customer asks why their details are on a forum, and that is the day you find out.
POPIA is clear on this. You stay the responsible party no matter what the contract says. Liability can move. The phone call does not.
HAX watches your third parties the same way it watches you. Same report, same detection window.
If you cannot name what your top three suppliers exposed this year, that is your answer.