{"id":668276,"date":"2026-09-19T20:38:15","date_gmt":"2026-09-19T18:38:15","guid":{"rendered":"https:\/\/mybroadband.co.za\/news\/?p=668276"},"modified":"2026-09-20T07:14:59","modified_gmt":"2026-09-20T05:14:59","slug":"hollard-customer-data-leaked-on-the-dark-web","status":"publish","type":"post","link":"https:\/\/mybroadband.co.za\/news\/security\/668276-hollard-customer-data-leaked-on-the-dark-web.html","title":{"rendered":"Hollard customer data leaked on the dark web"},"content":{"rendered":"\n<p>Hollard Insurance said that some of its funeral policyholders&#8217; data may have been leaked on the dark web as part of a cybersecurity incident involving MIP Holdings in June 2026.<\/p>\n\n\n\n<p>Notorious cyber extortion gang The Gentlemen claimed it breached Hollard&#8217;s systems last week and obtained sensitive data, which it threatened to leak unless the company negotiated with the group.<\/p>\n\n\n\n<p>Cybersecurity firm Check Point Software reported The Gentlemen as the second-most active ransomware group globally in August 2025.<\/p>\n\n\n\n<p>It is believed to have split from the Qilin ransomware group, which was the most active in Check Point&#8217;s analysis.<\/p>\n\n\n\n<p>Following The Gentlemen&#8217;s claim that it exfiltrated data from Hollard, <a href=\"https:\/\/mybroadband.co.za\/news\/security\/667199-south-african-insurance-company-allegedly-hit-by-cyberattack.html\" data-type=\"link\" data-id=\"https:\/\/mybroadband.co.za\/news\/security\/667199-south-african-insurance-company-allegedly-hit-by-cyberattack.html\" target=\"_blank\" rel=\"noreferrer noopener\">the insurer told MyBroadband<\/a> it was unaware of an attack but was actively and urgently investigating the claims.<\/p>\n\n\n\n<p>&#8220;We are aware of claims made by a threat actor in a post referencing the organisation on the dark web,&#8221; Hollard said.<\/p>\n\n\n\n<p>&#8220;We identified the threat through our proactive threat intelligence capabilities, immediately activated our cyber incident response processes and engaged specialist forensic investigators.&#8221;<\/p>\n\n\n\n<p>The Gentlemen published the data on its dark web leak site earlier this week, after the deadline for its ransom demand lapsed. <\/p>\n\n\n\n<p>In a <a href=\"https:\/\/www.hollard.co.za\/media-centre\/press-releases\/hollard-statement-regarding-reported-cyber-threat-claims\" data-type=\"link\" data-id=\"https:\/\/www.hollard.co.za\/media-centre\/press-releases\/hollard-statement-regarding-reported-cyber-threat-claims\" target=\"_blank\" rel=\"noreferrer noopener\">subsequent update<\/a>, Hollard said the information appeared to be linked to a previous cybersecurity incident involving MIP.<\/p>\n\n\n\n<p>MIP is a South African IT and policy administration provider to several organisations within the insurance sector.<\/p>\n\n\n\n<p>&#8220;We understand the concern this situation may cause and remain committed to protecting the information entrusted to us by our customers, brokers and partners,&#8221; Hollard said.<\/p>\n\n\n\n<p>&#8220;The matter appears isolated to individual funeral policyholders. We have notified customers who were affected by the June 2026 incident and are engaging with the relevant regulatory authorities.&#8221;<\/p>\n\n\n\n<p>A subset of the data seen by MyBroadband contained policyholders&#8217; full names, surnames, ID numbers, dates of birth, email addresses, phone numbers, contract numbers, and contract types.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Over 100,000 Hollard records stolen in attack<\/h2>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1200\" height=\"675\" src=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/09\/Hollard-Insurance-1200x675.jpg\" alt=\"\" class=\"wp-image-667200\" srcset=\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/09\/Hollard-Insurance-1200x675.jpg 1200w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/09\/Hollard-Insurance-600x338.jpg 600w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/09\/Hollard-Insurance-768x432.jpg 768w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/09\/Hollard-Insurance-1536x864.jpg 1536w, https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2026\/09\/Hollard-Insurance.jpg 1600w\" sizes=\"(max-width: 1200px) 100vw, 1200px\" \/><\/figure>\n\n\n\n<p><\/p>\n\n\n\n<p>In certain cases, the personal information of policyholders&#8217; partners, children, and beneficiaries was included alongside their own information.<\/p>\n\n\n\n<p>We counted over 100,000 records for customers indicated as having Hollard funeral policies, although this may not have been all the compromised data.<\/p>\n\n\n\n<p>Hollard said that the forensic and assurance activities conducted to date showed no evidence of compromise within the insurer&#8217;s own environment.<\/p>\n\n\n\n<p>&#8220;As a precaution, customers are encouraged to remain vigilant against unsolicited communications, phishing attempts and requests for personal or financial information,&#8221; it said.<\/p>\n\n\n\n<p>&#8220;Protecting the information entrusted to us by our customers, brokers and partners remains a priority. We continue to monitor the situation closely.&#8221;<br><br>The insurer said that should any material information emerge which changed its current assessment, it would communicate this promptly through its established incident response channels.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Notorious cyber extortion gang The Gentlemen has leaked a subset of data that it claimed to have stolen from Hollard Insurance&#8217;s systems. However, Hollard said the incident was due to an attack on a third party.<\/p>\n","protected":false},"author":341042,"featured_media":668279,"comment_status":"open","ping_status":"closed","sticky":true,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"posted","_sma_x_autopost_error":"","_sma_x_post_id":"2101380563953152470","_sma_facebook_post_id":"120850204637381_1505357984949513","_sma_instagram_post_id":"18124977340876747","_sma_threads_post_id":"18368897050243302","_sma_x_attempts":1,"footnotes":""},"categories":[27],"tags":[107637,70722,81121,72248,106445],"class_list":["post-668276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-security","tag-funeral-policies","tag-hollard","tag-hollard-insurance","tag-mip-holdings","tag-the-gentlemen"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/668276"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/341042"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=668276"}],"version-history":[{"count":17,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/668276\/revisions"}],"predecessor-version":[{"id":668306,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/668276\/revisions\/668306"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/668279"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=668276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=668276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=668276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}