Standard Bank Confirms Major Client Data Breach Affecting Personal Information and Liberty Subsidiary

Standard Bank warns clients of unauthorized access to ID numbers and personal data, with its subsidiary Liberty also affected by the security breach.

By: AXL Media

Published: Apr 9, 2026, 4:12 AM EDT

Source: Information for this report was sourced from BusinessTech

Security Breach Targets Personal Client Information

Standard Bank has officially notified its customer base regarding a recent security incident that allowed unauthorized access to private data. The breach, which was first detected on March 23, resulted in the exposure of sensitive information including individual names, identity numbers, and company registration details. While the bank maintains that the specific data compromised varies between individual accounts, the scope of the exposure has prompted a high-level forensic investigation involving external cybersecurity specialists to determine the full extent of the vulnerability.

System Stability Maintained Amid Data Leak

Despite the severity of the information theft, the institution has confirmed that its primary banking platforms and financial systems were not compromised. Operational stability remains intact, with transactional services continuing to function normally for all retail and corporate users. This distinction is critical for the bank, which stands as South Africa’s largest by assets under management, as it seeks to reassure investors and depositors that their actual funds and policy holdings remain behind secure firewalls.

Contamination Extends to Liberty Subsidiary

The security failure also impacted Liberty, the insurance and asset management giant that Standard Bank fully integrated into its operations four years ago. According to Yuresh Maharaj, the CEO of Insurance and Asset Management, the breach involved unauthorized third-party access to select data systems within the subsidiary. Standard Bank’s move to acquire the remaining 46.4% stake in Liberty in recent years was intended to create a seamless, efficient group structure, yet this incident highlights the shared risks inherent in such deep technological integration.