In December of 2020, Absa revealed that the leak was caused by an employee. According to Absa, the employee had unlawfully made selected customer data available to a small number of external parties. "Upon discovering the contravention, Absa secured high court orders that enabled search and seizure operations at various premises and secured all devices containing the data. The data on these devices was subsequently destroyed," said Absa.