--- title: Regulator hits FNB with R1-million Popia fine | daily.dev description: The Information Regulator fined First National Bank R1-million after a misconfigured app setting let 696 customers view 88 other people's home loan... canonical: https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Regulator hits FNB with R1-million Popia fine | daily.dev og:description: The Information Regulator fined First National Bank R1-million after a misconfigured app setting let 696 customers view 88 other people's home loan... og:url: https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym og:image: https://api.daily.dev/og/posts/ifaQLcwYM.png og:image:alt: Regulator hits FNB with R1-million Popia fine og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Regulator hits FNB with R1-million Popia fine **[TechCentral](https://daily.dev/sources/techcentral)** · 4 min read · 0 upvotes · 0 comments ## Summary The Information Regulator fined First National Bank R1-million after a misconfigured app setting let 696 customers view 88 other people's home loan applications. Nine of those people had their account numbers exposed. Some account holders had been incorrectly classified as FNB employees, giving them access to applicants' names, ID numbers, contact details, income and salary information. Two customers reported the issue in 2022, but FNB treated each report as an isolated incident and did not report it to the regulator, which became involved after a complaint in September 2022. The regulator also ordered FNB to stop unlawful data collection from newspapers and to amend its privacy notice, and FNB must report back with evidence of compliance within 90 days. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### Why did South Africa's Information Regulator fine FNB R1-million? A misconfigured setting in the FNB banking app incorrectly classified some account holders as FNB employees, giving them access to a list of 88 home loan applications in progress, including 696 customers who could view applicant names, ID numbers, addresses, income details and in nine cases bank account numbers. FNB failed to fix the issue after two separate customer reports in 2022 and never notified the regulator, which only learned of it through a later complaint. _Teams handling financial data can follow regulatory enforcement cases like this one on daily.dev to spot compliance gaps early._ ### What is section 105 of South Africa's Protection of Personal Information Act (Popia)? Section 105 of Popia deals with the mishandling of bank account numbers and was the basis for the R1-million fine issued against First National Bank. The Information Regulator found that nine of 88 exposed home loan applicants had their account numbers compromised through a misconfigured app permission that wrongly granted employee-level access to some customers. _Developers building compliance into fintech apps can track Popia enforcement precedents via daily.dev._ ## Similar posts on daily.dev - [FNB app knocked offline on Black Friday](https://daily.dev/posts/fnb-app-knocked-offline-on-black-friday-eayn9k7bp) · TechCentral · 0 upvotes · 0 comments - [Truecaller cooperating with Info Regulator’s Popia probe](https://daily.dev/posts/truecaller-cooperating-with-info-regulator-s-popia-probe-m6s4bpctj) · TechCentral · 0 upvotes · 0 comments - [France fines telcos €42M for issues leading to 2024 breach](https://daily.dev/posts/france-fines-telcos-42m-for-issues-leading-to-2024-breach-hoqqzpcqt) · The Register · 0 upvotes · 0 comments - [1.2 Million Bank Accounts Exposed in Financial Systems Breach](https://daily.dev/posts/1-2-million-bank-accounts-exposed-in-financial-systems-breach-flccsxygb) · Security Boulevard · 0 upvotes · 0 comments --- Tags: [#data-privacy](https://daily.dev/tags/data-privacy), [#fintech](https://daily.dev/tags/fintech), [#data-breach](https://daily.dev/tags/data-breach) [View this post on daily.dev](https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Regulator hits FNB with R1-million Popia fine","url":"https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym"},"datePublished":"2026-10-27T11:34:01.777Z","dateModified":"2026-10-27T11:34:29.947Z","description":"The Information Regulator fined First National Bank R1-million after a misconfigured app setting let 696 customers view 88 other people's home loan...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a01a59318d276c4f22f39f1f194631a5?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/a01a59318d276c4f22f39f1f194631a5?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"TechCentral","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"TechCentral","logo":"https://media.daily.dev/image/upload/s--RsqLDZrL--/f_auto/v1717745297/logos/techcentral","url":"https://daily.dev/sources/techcentral"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"data-privacy,fintech,data-breach","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"TechCentral","item":"https://daily.dev/sources/techcentral"},{"@type":"ListItem","position":3,"name":"Regulator hits FNB with R1-million Popia fine"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/regulator-hits-fnb-with-r1-million-popia-fine-ifaqlcwym#faq","mainEntity":[{"@type":"Question","name":"Why did South Africa's Information Regulator fine FNB R1-million?","acceptedAnswer":{"@type":"Answer","text":"A misconfigured setting in the FNB banking app incorrectly classified some account holders as FNB employees, giving them access to a list of 88 home loan applications in progress, including 696 customers who could view applicant names, ID numbers, addresses, income details and in nine cases bank account numbers. FNB failed to fix the issue after two separate customer reports in 2022 and never notified the regulator, which only learned of it through a later complaint. Teams handling financial data can follow regulatory enforcement cases like this one on daily.dev to spot compliance gaps early."}},{"@type":"Question","name":"What is section 105 of South Africa's Protection of Personal Information Act (Popia)?","acceptedAnswer":{"@type":"Answer","text":"Section 105 of Popia deals with the mishandling of bank account numbers and was the basis for the R1-million fine issued against First National Bank. The Information Regulator found that nine of 88 exposed home loan applicants had their account numbers compromised through a misconfigured app permission that wrongly granted employee-level access to some customers. Developers building compliance into fintech apps can track Popia enforcement precedents via daily.dev."}}]} ```