// INCIDENT · 2026-03 · PUBLIC SECTOR / STATISTICS

Statistics South Africa (Stats SA).

Data breach + extortion. Job seeker application data exposed. Stats SA said it would not pay the ransom and would notify the Information Regulator.

← All tracked breaches
Date2026-03
SectorPublic sector / statistics
TypeData breach + extortion
Records453,362 files (154 GB) claimed by attackers
AttackerXP95 (claimed)
StatusConfirmed by Stats SA

How the attack happened.

Breach of the online HR system job seekers use to apply for posts; data stolen and a $100,000 ransom demanded

Impact.

Job seeker application data exposed. Stats SA said it would not pay the ransom and would notify the Information Regulator.

Primary sources.

Would your business survive this happening to you?

Most SA SMBs do not have the detection or incident-response capability to answer that honestly. We can help you work out where your real gaps are.

Talk to us → See our cybersecurity services