The personal records of hundreds of thousands of South African insurance clients were taken in a single attack.