Cyber Conduct
All incidents

My personal information may have leaked

You've learned that your ID number, banking details, address, or other personal information may have been exposed, perhaps through a data breach at a company you use. This increases the risk of identity theft and targeted scams, but it doesn't mean fraud has definitely happened.

Do this now

  • Check which specific information was exposed, if the notifying organisation has told you.
  • Watch your bank accounts and credit-related communication closely over the coming weeks.
  • Be extra cautious of follow-up calls or messages referencing the leaked details — scammers often use leaked information to sound convincing.

Then do this

  • Consider placing a note or alert with your bank if ID or card details were exposed.
  • Change passwords on accounts linked to the exposed email address.
  • Enable MFA on your most important accounts (email, banking).

Check these things

  • Which specific fields were exposed — email, ID number, banking details, password?
  • Are you receiving unusual calls or messages that reference this information?

Don't do this

  • Don't panic-close accounts without understanding what was actually exposed.
  • Don't share further personal information to 'verify' your identity with someone who contacts you unexpectedly.

When should I get help?

  • Contact your bank if ID or financial details were part of the leak.
  • Consider consulting South Africa's information regulator resources on POPIA for your rights.

Related