Data Breach: National Credit Regulator (NCR) – What You Need to Know
On December 24, 2025, a significant data breach occurred involving the National Credit Regulator (NCR), a key entity responsible for overseeing the credit industry. This breach, attributed to the hacking group Dragonforce, has raised concerns about the safety and security of sensitive consumer information.
About National Credit Regulator (NCR)
The National Credit Regulator (NCR) plays a crucial role in the South African financial landscape. It is tasked with regulating the credit industry to protect consumers and ensure fair practices among credit providers. With the increasing reliance on digital systems, the NCR handles a vast amount of personal and financial data, making it a prime target for cybercriminals.
What Happened
On the fateful day of December 24, 2025, the NCR discovered that it had fallen victim to a coordinated cyberattack by Dragonforce. The breach exposed sensitive information, potentially affecting countless individuals. The details of the attack are still being investigated, but the implications for affected parties are significant.
Next Steps
If you believe that you may have been affected by this data breach, it is crucial to take action as soon as possible. We at SLF (Srourian Law Firm) are here to help you understand your options and rights in the wake of this incident. Please reach out to us to discuss your situation and explore the best course of action.
LINKS:

Srourian Law Firm is investigating a potential class action lawsuit against National Credit Regulator (NCR) for a recent data breach.
If you received a NOTICE OF DATA BREACH letter from National Credit Regulator (NCR), complete the form below so we can discuss your legal options.
Submit Your Information
