1/Ok so I believe Econet. I do not think the breach was on their primary systems. I have a hypothesis, and it relies on the subsequent breaches. Three so far… Econet, Ecocash Holdings, and Nyaradzo.
Disclaimer: If you go digging in darker parts of the internet, rent a virtual machine—if you poke in the dark, who knows what pokes back. 👀