IMPORTANT NOTICE REGARDING A SECURITY INCIDENT

Date: 15/10/2026


At Lawyers for Human Rights (“LHR”), we are committed to protecting the confidentiality, privacy and security of the information entrusted to us.

On 5 October 2026, we identified suspected unauthorised access to a database containing information held on behalf of LHR by a third-party service provider. Upon becoming aware of the incident, we immediately took steps to secure the affected environment, commenced an investigation, and engaged specialist cybersecurity support to assist in understanding the nature and scope of the incident.

Our investigations indicate that an unauthorised third party accessed and downloaded information from the affected database. We have taken measures to contain the incident and continue to work closely with technical specialists to assess the information involved and strengthen existing safeguards.

The specific information involved differs depending on an individual’s relationship with LHR and the information held by us. Based on our investigation to date, information that may have been affected includes:

  • Full names and surnames;
  • South African identity numbers, passport numbers, refugee or asylum seeker permit numbers, or other identification information;
  • Contact information, including residential, postal and physical addresses, telephone numbers and email addresses;
  • Dates of birth;
  • Gender and nationality information;
  • Employment and contractor-related information;
  • Tenant and lease-related information;
  • Organisation or company information, including company registration details where applicable;
  • Information relating to matters in which legal services were sought or provided;
  • Correspondence and documents shared with LHR in the course of our work;
  • Records relating to beneficiaries, clients, partners, donors, service providers, employees, contractors or tenants; and
  • Other personal information provided to or collected by LHR in connection with its operations and services.

We are notifying potentially affected individuals and the relevant authorities in line with our legal obligations and our commitment to transparency.

What steps are we taking to minimize the risk to our clients and partners

We have:

  • Secured the affected environment and implemented additional protective measures;
  • Initiated a comprehensive investigation into the incident and its impact;
  • Engaged specialist cybersecurity experts to support the investigation and response;
  • Begun notifying affected individuals where required; and
  • Reported the matter to the relevant regulatory authorities.

What This Means for You

We encourage individuals whose data may have been affected to remain vigilant and consider taking the following precautionary steps:

  • Monitor your accounts and records for any unusual or suspicious activity;
  • Be cautious of unexpected emails, phone calls, SMS messages, WhatsApp messages or other communications seeking personal information;
  • Do not disclose passwords, PINs, one-time passwords (OTPs) or verification codes to anyone;
  • Remain vigilant regarding activity on your bank accounts and contact your financial institution immediately if you identify suspicious activity;
  • Enable multi-factor authentication on email, banking and other sensitive online accounts wherever possible;
  • Verify communications relating to legal matters or requests for information through known LHR contact details before responding;
  • Register with the Southern African Fraud Prevention Service for protective registration. This is a free service. If anyone tries to apply for any banking related products with your identity number, it will be declined or referred for further review. Visit https://www.safps.org.za/Home/OurServices_ApplyProtectiveRegistration
  • Consider checking your credit profile periodically for unauthorised accounts or enquiries.

Our Commitment

LHR understands the trust that clients, partners, donors, employees, tenants, and other stakeholders place in us. We take this incident seriously and are committed to ensuring that appropriate measures are implemented to safeguard information and reduce the risk of similar incidents occurring in the future.

As our investigation progresses, we will continue to assess the situation and provide further information where appropriate.

Contact Us

If you have any questions regarding this notice, please contact:

Information Officer                                                                        
Nabeelah Mia
Email: Nabeelah@lhr.org.za
Telephone: 012 320 2943

Deputy Information Officer          
Gideon Mothapisi
Email: Gideon@lhr.org.za
Telephone: 012 320 2943

Thank you for joining
Thank you for joining the LHR Newsletter, we will be in touch soon