Pretoria Society of Advocates Data Breach
The 2026 Pretoria Society of Advocates data breach occurred on February 3, 2026, when internal member databases and content management systems of the Pretoria Society of Advocates (pretoriabar.co.za), South Africa's statutory association of specialized advocates, were compromised and disseminated on cybercrime forums.
Exposed Data Types
1 sensitive7- Ethnicities
- Email addresses
- Names
- Phone numbers
- Dates of birth
- Genders
- Physical addresses
About This Breach
What information was affected in the Pretoria Society of Advocates incident?
The leaked JSON tables (old_ptabar_db_01.json, psa_joomla_db1.json, ptabar_data_db2.json) encompass regulatory registry records of legal practitioners. The breach compromised records for 2,425 unique advocates, exposing:
- Biographic Identifiers: Full legal names, dates of birth, gender, and demographic classifications.
- Contact Credentials: Canonical professional email addresses, direct mobile numbers, and chamber switchboard numbers.
- Chambers & Geographic Data: Chambers group names, office numbers, street addresses, and postal codes in Pretoria and surrounding jurisdictions.
How many accounts were affected?
Rigorous RFC canonical parsing and deduplication confirmed 2,425 unique valid advocate email addresses.
Technical analysis and security risks
The exposure of specialized litigators and advocates handling high-stakes legal disputes presents acute risks of spear-phishing, litigation interference, client impersonation, and targeted social engineering targeting legal chambers.
Recommended actions for affected users
Advocates affiliated with the Pretoria Bar should:
- Immediately update passwords on professional email and document management portals.
- Implement multi-factor authentication (MFA / 2FA) across all chambers communication tools.
- Subject unexpected communications containing court notices or legal briefs to independent verification.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
