ThisIsMe Says Its KYC Systems Were Not Breached in SA

In Short

• ThisIsMe says it is not the service provider linked to a reported cyber incident involving a South African KYC and FICA compliance firm.
• The company says its systems and customer data have not been compromised.
• ThisIsMe says clients do not need to take any action.

What Happened

ThisIsMe says it was not the third-party provider involved in recent reports of a cyber incident affecting a South African KYC and FICA compliance service provider. KYC means “know your customer”, it is an identity check used by banks and fintechs. FICA refers to South Africa’s Financial Intelligence Centre Act rules, which set requirements for verifying customers and monitoring risk.

In a notice shared on September 16, 2026, the company said it has no relationship or integration with the provider mentioned in the incident reports. It also said there has been no compromise of its platform, infrastructure, or the client data it holds.

ThisIsMe added that its services are operating normally. It told customers they do not need to reset credentials, change integrations, or take any extra steps related to their accounts.

For clients with questions, the company said they can contact their account manager or reach the team via email.

Why It Matters

Identity and compliance providers sit in the middle of onboarding flows for banks, lenders, marketplaces, and payment companies. When a third-party KYC vendor has a cyber incident, even unrelated providers can face customer anxiety, delayed onboarding, and higher scrutiny from regulators.

This kind of clarification is also part of third-party risk management, which is the process companies use to assess suppliers that touch sensitive data. In fintech and regulated industries, a single vendor issue can trigger audits, contract reviews, or temporary pauses in sign-ups.

For South African businesses relying on ThisIsMe for identity verification and FICA-aligned checks, the message is simple. The company says its systems remain secure, and operations continue as normal.