[News](/news)

Liberty (South Africa) Investigating Data Breach

[Blog](/blog)[Breaches](/breaches)[Resources](/resources)[News](/news)

# Liberty (South Africa) Investigating Data Breach

##### [UpGuard Team](/team/upguard)

March 26, 2026

### Key facts: Liberty Group SA data breach

* **Date reported:** March 24, 2026.
* **Unauthorized access identified:** Not disclosed (Disclosed publicly on March 24, 2026).
* **Target entity:** Liberty Group SA (liberty.co.za).
* **Source of breach:** Unknown, unauthorized third-party.
* **Data types:** Not yet disclosed; select data systems accessed, but customer policies and investments reportedly secure.
* **Status:** Confirmed; investigation ongoing and client notifications via SMS have commenced.
* **Severity:** Medium; while core financial assets are reportedly safe, unauthorized access to corporate systems carries risks of information exposure and phishing.

## What happened in the Liberty Group SA data breach?

Liberty Group SA (liberty.co.za), a financial services provider owned by Standard Bank, disclosed a data breach on March 24, 2026. The incident involved unauthorized third-party access to select data systems within the organization's infrastructure. No specific threat actor has been identified in connection with the breach at this time, and the company is currently working to determine the full extent of the intrusion.

The organization has characterized the severity as medium. According to CEO Yuresh Maharaj, customer policies and investments were not compromised during the event, and all services remain fully operational. Liberty Group SA has launched a comprehensive investigation into the scope of the unauthorized access and has begun notifying affected clients via SMS. While core financial assets are reportedly safe, unauthorized access to corporate systems typically carries risks of information exposure or future targeted phishing attempts.

## Who is behind the incident?

The attacker or cause of the incident has not been identified.

## Impact and risks for Liberty Group SA customers

For customers of Liberty Group SA, the primary risks involve the potential exposure of personal information, even if core financial investments remain secure. Such incidents can lead to identity theft, credential abuse, or sophisticated phishing campaigns where attackers leverage known associations to gain trust. While the company has stated that services are operational, affected individuals should remain vigilant for any unusual activity or communications that appear to originate from the bank.

Financial institutions often face prolonged scrutiny following data exposures. Customers should monitor their accounts, enable multi-factor authentication, and be wary of unsolicited communications. Maintaining transparency throughout the investigation helps mitigate long-term reputational damage and assists customers in taking timely protective actions to secure their digital identities.

## How to protect against similar security incidents

Following the unauthorized access at Liberty Group SA, customers should take proactive steps to secure their personal and financial information.

* ‍**Monitor financial accounts and statements.** Regularly review bank statements and investment portfolios for unauthorized transactions. Report any suspicious activity to Liberty Group SA and your financial institution immediately.**‍**
* **Enable multi-factor authentication.** Activate multi-factor authentication (MFA) on all financial and email accounts. Use phishing-resistant methods like authenticator apps or hardware keys rather than SMS when possible.**‍**
* **Exercise caution with communications.** Be skeptical of unsolicited SMS, emails, or phone calls claiming to be from Liberty or Standard Bank. Avoid clicking links or providing sensitive information through unverified channels.**‍**
* **Implement attack surface management.** Organizations should [utilize continuous monitoring tools](https://www.upguard.com/product/breach-risk/threat-monitoring) to identify vulnerabilities in their digital infrastructure. Regularly audit third-party access and system permissions to prevent unauthorized entry.

*Promptly following these security best practices can significantly reduce the risk of secondary exploitation after a data breach.*

## Frequently asked questions

### What happened in the Liberty Group SA security breach?

On March 24, 2026, Liberty Group SA (liberty.co.za) disclosed a security breach. According to initial reports, an unauthorized third party gained access to select data systems, though the company stated that customer policies and investments remain secure.

### When did the Liberty Group SA breach occur?

The Liberty Group SA breach was publicly reported on March 24, 2026. The exact date of the attack has not been disclosed.

### What data was exposed?

The types of data involved in the Liberty Group SA incident have not been disclosed. This page will be updated as verified information becomes available.

### Is my personal information at risk?

If you interacted with Liberty Group SA, there's a possibility your personal information could be affected. Similar incidents often involve email addresses, login details, or financial records. Stay alert for updates and take precautionary measures to secure your accounts.

### How can I protect myself after a data breach?

• Change your account passwords immediately.\
• Enable [multi-factor authentication (MFA)](https://www.upguard.com/blog/mfa-multi-factor-authentication) on all sensitive accounts.\
• Monitor your financial statements for unauthorized activity.\
• Watch for phishing attempts via email or SMS.\
• Use data breach monitoring tools to track your information.

### What steps should companies take after being breached?

Liberty Group SA is working to secure systems, notify affected parties via SMS, and provide guidance on protective actions. The company is also reviewing security measures and may deploy attack surface management to prevent future incidents.

*This cybersecurity news article is powered by&#x20;*[*UpGuard Breach Risk*](https://www.upguard.com/product/breach-risk)*&#x20;— continuous attack surface monitoring for your organisation and supply chain.*

## How secure is Liberty?

Liberty provides property services including repairs, maintenance, heating installations, compliance services, and construction work primarily for social housing providers and local authorities. The company offers whole-property solutions covering electrical safety, responsive repairs, and decarbonisation programs.

* View our free preliminary report on Liberty’s security posture
* 13 risk factors, including email security, SSL, DNS health, open ports and common vulnerabilities

[View Liberty's score](/security-report/liberty)

[View score](/security-report/liberty)

[https://www.liberty-group.co.uk/](/security-report/liberty)

### Sign up for our newsletter

UpGuard's monthly newsletter cuts through the noise and brings you what matters most: our breaking research, in-depth analysis of emerging threats, and actionable strategic insights.

## Latest news

Stay up-to-date with the latest news in cybersecurity.

[](/news/hugging-face-data-breach-2026-07-20)

#### [Hugging Face data breach: key facts and what we know so far](/news/hugging-face-data-breach-2026-07-20)

A data breach involving Hugging Face was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 20, 2026

[](/news/ey-data-breach-2026-07-19)

#### [EY data breach: what happened and what's at risk](/news/ey-data-breach-2026-07-19)

A data breach involving EY was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 15, 2026

[](/news/south-florida-injury-convenient-care-data-breach-2026-07-16)

#### [South Florida Injury & Convenient Care data breach exposes names and Social Security numbers](/news/south-florida-injury-convenient-care-data-breach-2026-07-16)

A data breach involving South Florida Injury & Convenient Care was reported in July 2026. See incident details, impact on customers, and security measures.

##### [UpGuard Team](/team/upguard)

July 15, 2026

[](/news/park-west-psychology-data-breach-2026-07-16)

#### [Park West Psychology data breach: what happened and what's at risk](/news/park-west-psychology-data-breach-2026-07-16)

A data breach involving Park West Psychology was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 15, 2026

[](/news/fall-river-municipal-credit-union-data-breach-2026-07-16)

#### [Fall River Municipal Credit Union data breach: what happened and what's at risk](/news/fall-river-municipal-credit-union-data-breach-2026-07-16)

A data breach involving Fall River Municipal Credit Union was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [](#)

July 14, 2026

[](/news/npcil-data-breach-2026-07-16)

#### [NPCIL data breach: World Leaks claims exposure of Kudankulam Nuclear Power Plant files](/news/npcil-data-breach-2026-07-16)

A data breach involving NPCIL was reported in July 2026. See incident details, impact on customers, and recommended security measures.

##### [UpGuard Team](/team/upguard)

July 14, 2026

[View all news](/news)

## Protect your organization

Get in touch or book a free demo.

[Contact sales](/demo)

[Free demo](/demo)

##### Free instant security score

## How secure is your organization?

Request a free cybersecurity report to discover key risks on your website, email, network, and brand.

* Instant insights you can act on immediately
* Hundreds of risk factors including email security, SSL, DNS health, open ports and common vulnerabilities

[Free score](/instant-security-score)
