Shoprite names cybersecurity its top risk as data breaches rise

South African retailer Shoprite ranked information security first among its six core risks in its 2026 integrated report, rating its controls only "partially effective". It recorded four data breaches in FY2026, up from three in FY2025, while its Xtra Savings loyalty programme logs over 2,500 card swipes a minute.

• Cyber risk rated critical, with residual risk still medium
• Four data breaches in FY2026 vs three in FY2025 and one in FY2024
• Xtra Savings drives 88.7% of sales and holds 5,000+ data points per member
• SAP S/4Hana upgrade targeted for completion by 2029