South Africa Faces Surge in Cyberattacks as Data Breaches Rise 40% South Africa is experiencing a sharp increase in cyber threats, with data breaches rising by 40% in recent months. The Information Regulator reported 2,374 security compromise notifications in the 2024/25 financial year nearly 200 incidents monthly while an additional 1,947 breaches were recorded between April and November 2025. Cybercriminals are increasingly targeting individuals with strong online presences, particularly social media influencers, whose personal data may already be circulating on the dark web. Muhammad Ali, managing director of WWISE, warns that many South Africans underestimate their vulnerability, assuming hacking "won’t happen to me" until it does. Under the Protection of Personal Information Act (Popia), companies must notify affected customers of breaches, but individuals must also act swiftly verifying breach details, updating passwords, replacing compromised cards, and enabling multi-factor authentication. However, misconceptions persist, with many believing cybercrime only affects large corporations. Ali highlights that human error remains the weakest link, as executives and employees often lack awareness of threats like phishing and spear-phishing. Weak identity management, inadequate firewalls, and reliance on generic compliance policies further expose organizations. South Africa’s perceived weaker cybersecurity infrastructure and lighter penalties make it an attractive target for attackers. The financial impact is severe: IBM’s 2025 report estimates the average data breach cost for South African businesses at R44.1 million far exceeding Popia’s maximum fine of R10 million. Despite this, many companies prioritize short-term revenue over cybersecurity investments, treating it as a compliance checkbox rather than a critical business risk. The growing threat underscores the need for heightened vigilance across all sectors.