Millions of South Africans’ personal information may have been leaked online