{
  "id": 16876266,
  "title": "FNB fined R1 million for POPIA breach after sensitive customer information was exposed",
  "url": "https://urgent.news/2026/10/28/fnb-fined-r1-million-for-popia-breach-after-sensitive-customer",
  "topic": "tech",
  "section": "Tech",
  "published": "2026-10-28T08:52:00.000Z",
  "source": {
    "name": "IOL",
    "slug": "iol",
    "url": "https://iol.co.za/business/2026-10-28-fnb-fined-r1-million-for-popia-breach-after-sensitive-customer-information-was-exposed/"
  },
  "original_language": "en",
  "account": "First National Bank (FNB) faces a R1 million fine from the Information Regulator for violating the Protection of Personal Information Act (POPIA). The bank did not intentionally expose customers' personal information, but a security vulnerability in its app allowed unauthorized access to sensitive data. The flaw in the banking app granted some customers access to a feature meant for employees to assist with home loan applications, resulting in the exposure of ID numbers and, in nine instances, bank account numbers.\n\nThe Information Regulator found that FNB failed to address the security issue adequately after being alerted to the problem. While the bank restricted access for the affected individuals, it did not effectively resolve the broader security flaw, treating the separate incidents as distinct issues. The regulator identified significant shortcomings in FNB's identification, classification, and response to repeated security incidents that endangered the confidentiality of personal information. This included an inadequate response to regulatory directives and a failure to strengthen security safeguards and organizational governance.\n\nFNB is being fined for committing an offence under POPIA section 105, as the company should have known of the risk of such a contravention and the potential for substantial damage or distress to affected individuals. The regulator urges public and private organizations to review their compliance programs, enhance information-security measures, ensure Information Officers fulfill their statutory responsibilities, and promptly address regulatory directives.",
  "summary": "FNB has been fined R1 million for breaching South Africa’s privacy law after a security flaw exposed the personal information of 88 home-loan applicants to hundreds of unauthorised people.",
  "key_points": [],
  "editors_take": null,
  "illustration": null,
  "coverage": {
    "outlets": 1,
    "also_reported_by": []
  },
  "ai_generated": true,
  "disclaimer": "Summaries, key points and the editor’s take are written by software from other outlets’ reporting and may contain errors — always check the linked original."
}