National Credit Regulator
Data Breach on December 26, 2025
| Data Breach Report | |||
|---|---|---|---|
| Victim | ncr.org.za | ||
| Threat Actor | DragonForce | ||
| Date Discovered | Dec 26, 2025 | ||
| Description | National Credit Regulator is a statutory government body based in South Africa, responsible for regulating the South African credit industry under the National Credit Act, promoting consumer protection, responsible credit practices and licensing and oversight of credit providers, credit bureaus, debt counsellors and related entities to foster a fair, transparent credit market. | ||
| Leak Size | 42.2GB |
Credential Exposure for ncr.org.za
We've indexed 86 @ncr.org.za accounts from external breaches, plus 7 credentials for ncr.org.za itself.
Last checked Aug 16, 2026
| @ncr.org.za addresses from external breaches | |
|---|---|
| Third-party breaches | 79 accounts · across 34 breaches · 74 with a plaintext password · most recent Apr 30, 2024 |
| Combo lists | 52 accounts · most recent Aug 8, 2026 |
| Passwords for ncr.org.za accounts | |
|---|---|
| Combo lists | 7 logins · most recent Aug 5, 2026 |
Logins may belong to customers or to staff, and the data doesn't say which. None of this is necessarily connected to the ransomware attack above.
Is your organization next?
National Credit Regulator was breached. Check if your company's credentials have been exposed in this or other data breaches.
Check your exposure →Continuous dark web monitoring alerts you when we find leaked credentials or session tokens for your company.