Standard Bank kept customers informed about the breach.

So did Rootboy.

The attacker had better incident documentation than the victim. A piece on what that actually means for IR as a control.

https://open.substack.com/pub/sovereignauditor/p/standard-bank-kept-customers-informed

#CyberSecurity #StandardBank #GDPR #Ransomware #InfoSec

Standard Bank kept customers informed. So did Rootboy.

On 14 April 2026, a threat actor named Rootboy began publishing stolen Standard Bank customer data on a schedule he had announced in advance.

The Sovereign Auditor