> ## Content Index
> Fetch the complete content index at: https://www.businessbagel.com/llms.txt
> Use this file to discover other available public pages before exploring further.

# The Roundup — Tuesday, 15 September 2026
- URL: https://www.businessbagel.com/the-roundup-tuesday-15-september-2026/
- Published: 2026-09-15T04:00:00.000Z
- Updated: 2026-09-15T03:59:59.000Z
- Author: Christian Maidman

Today’s edition

Check Mate

Good morning. Five South African brands wrote to customers over the weekend about a data breach, and not one of them was hacked. Capitec is paying the Reserve Bank R28 million over its client files, with nobody alleging that a rand of dirty money moved. And a paragraph Oracle was obliged to print showed Larry Ellison heading for the door with $7.5 billion of stock, right up until he wasn’t.

The forms did all the damage today. Let’s get into it.

---

MARKETS

![](https://storage.ghost.io/c/97/24/9724ffa3-48e9-48a7-a5f7-e38b7d2c9b36/content/images/2026/09/markets--42-.png)

---

ID PARADE

![](https://storage.ghost.io/c/97/24/9724ffa3-48e9-48a7-a5f7-e38b7d2c9b36/content/images/2026/09/2-4.png)

## Five companies sent the same breach letter last weekend, and one ID checker sits behind all of them

Open an investment account in South Africa and somebody has to prove that you are you. The law makes that the firm’s job rather than yours, which is why a broker wants your ID number, address and bank details before it takes a cent. EasyEquities, Satrix, Cell C Fibre, Bidvest Bank and Peregrine Capital all bought that job in from the same supplier.

The supplier is RelyComply, and on 9 September the ransomware group Dire Wolf listed it on a leak site. Over the weekend, all five wrote to customers about a cyber incident at a third party. Every one of them said its own systems were untouched, and every one of them was telling the truth.

**What the one supplier was holding:**

- Dire Wolf says it took 200GB out of RelyComply’s systems, and that 92 million rows of it are core customer data drawn from organisations it has not named.
- Peregrine Capital is the only one of the five to publish a list, and it reads like the FICA form itself: name, ID or passport number, date of birth, contact details, home address and bank account details.
- Purple Group, which owns EasyEquities, moved to RelyComply in May to replace a scatter of smaller compliance tools with one system. EasyEquities alone has close to 2.9 million users.

None of that can be reissued the way a card can. Peregrine has told the Information Regulator and stopped sending it client data. The other four are still waiting for the forensic report.

[**Read the full story →**](https://www.businessbagel.com/relycomply-vendor-breach-fica-data/)

---

FINE PRINT

![](https://storage.ghost.io/c/97/24/9724ffa3-48e9-48a7-a5f7-e38b7d2c9b36/content/images/2026/09/6-5.png)

## Three financial firms were fined on the same Friday, and one of them had already won an appeal

A bank can be fined R28 million in South Africa without a rand of dirty money having moved. On Friday morning the Prudential Authority, the Reserve Bank’s supervisor of banks and insurers, published sanctions against Capitec, Ninety One Assurance and Albaraka Bank, all of them for breaches of the Financial Intelligence Centre Act and all of them administrative. Both Capitec and Ninety One say nothing was laundered, nobody was defrauded and no client lost anything. The notices make no such allegation.

The findings read like an audit. Capitec did not check enough of its sampled clients properly, did not keep checking them after the accounts were open, and did not train the staff who were meant to be doing it. Its business bank also put name-screening and payment-screening manuals into use before management had approved them, and that alone cost R5 million. Ninety One Assurance’s own R6 million splits two ways: checks on higher-risk clients, and a risk programme that was supposed to cover sanctions screening and did not. Both firms cooperated, both paid, and neither appealed.

Albaraka Bank took the third notice, and had already had a separate R2 million penalty set aside on appeal. Capitec and Ninety One paid, and told shareholders nothing.

[**Read the full story →**](https://www.businessbagel.com/capitec-ninety-one-assurance-fica-fines/)

---

BAGEL BITE

**Which of these nuts grows on the outside of its fruit?**

**A.** Almond

**B.** Walnut

**C.** Cashew

---

DOING THE ROUNDS

![](https://storage.ghost.io/c/97/24/9724ffa3-48e9-48a7-a5f7-e38b7d2c9b36/content/images/2026/09/5-2.png)

**Every tonne of coal and iron ore South Africa sells abroad has moved on one company’s tracks.** Transnet’s railway has lost more than a third of its cargo in five years to theft, vandalism and mismanagement, and the fix on offer is competition. Eleven private operators have officially signed access agreements, and two of them are finishing safety checks now to run their first test trains before the year is out. [**Full story →**](https://www.businessbagel.com/private-trains-transnet-rail-network-monopoly/)

**When an FNB Connect customer runs out of airtime and is advanced some anyway, something has to decide in a second whether they are good for it.** Optasia builds that something, and FirstRand has been buying into it, lifting its stake to just over a quarter. Revenue rose 58% in the six months to June, with micro-lending now close to three quarters of it. It has raised its full-year target to growth of 30 to 40%. [**Full story →**](https://www.businessbagel.com/optasia-micro-financing-solutions-group-revenue/)

**The card machines in your spaza shop and the cash vault at the petrol station belong to Lesaka, and it has just made money for the first time since it was put together in 2022.** Net income came to R39.8 million, against a R1.65 billion loss the year before. The merchant division, which brings in most of the revenue, went the other way: sales down a tenth, earnings down 6%. About 30 people have been affected by the restructuring, and Southern Africa CEO Lincoln Mali will not rule out more. [**Full story →**](https://www.businessbagel.com/lesaka-khaole-africa-expansion-merchant-unit/)

**Company insiders schedule share sales months in advance so nobody can accuse them of trading on what they know.** Oracle disclosed one of those schedules on Friday: Larry Ellison, its founder and executive chair, had set one up in June allowing him to sell 50 million shares, worth about $7.5 billion. On Saturday Oracle said he had cancelled it, that nothing had been sold, and that he has no other plans to sell. The company gave no reason. Oracle’s shares are down about a fifth this year. [**Full story →**](https://www.businessbagel.com/larry-ellison-cancels-oracle-stock-sale/)

---

WEATHER

![](https://storage.ghost.io/c/97/24/9724ffa3-48e9-48a7-a5f7-e38b7d2c9b36/content/images/2026/09/weather--38-.png)

---

BAGEL GAMES

![](https://storage.ghost.io/c/97/24/9724ffa3-48e9-48a7-a5f7-e38b7d2c9b36/content/images/2026/09/Wordle--42-.png)

Have you got what it takes to win today’s Wordle? [**Play here →**](https://puzzel.org/en/wordle/play?p=-P1VWOAs3b56baSkVLVp&ref=businessbagel.com)

---

THE ANSWER

As for the Bagel Bite, the answer is: **C. Cashew**

Most nuts develop inside a shell or casing, but the cashew hangs below the cashew apple in its own curved shell. That shell contains a caustic oil related to poison ivy, which is why cashews are always sold shelled and never in the raw shell. The cashew apple itself is edible and juicy, though it bruises too easily to travel well. Cashews originally come from Brazil and are now grown across warm regions worldwide.

---

That’s your Tuesday started. Enjoyed it? Forward it on, a friend can subscribe in a click. Written by the Business Bagel crew.