Millions of South Africans impacted by ‘significant data breach’

guest · Sep 24, 2021

Millions of South Africans caught up in security incident after debt recovery firm suffers ‘significant data breach’
Sensitive information is among datasets potentially exposed
September 24, 2021
https://portswigger.net/daily-swig/...recovery-firm-suffers-significant-data-breach

More than a million South African citizens have potentially had their personal data exposed after a ransomware attack at a debt recovery services firm.
The company in question, Debt-IN Consultants, confirmed this week (September 22) that it had been the victim of a cyber-attack which resulted in a “significant data breach” of consumer and employee personal information.

More than 1.4 million South Africans are suspected to have been impacted by the incident, after Debt-IN says their data was illegally accessed from servers in April this year.
Click to expand...

The Durban-based organization said the data leak only came to light last week with the discovery that confidential consumer data and voice recordings of calls between Debt-IN debt recovery agents and financial services customers had been posted on “hidden internet sites” that are only accessible by a “specialized” web browser.

“We reiterate that we view this attack as the act of malicious cybercriminals. From the time this data breach was detected, our guiding principle has been to put our clients first, and we will continue to do so.”
Debt-IN also provided a guide (PDF) for customers detailing what happened and what future steps it will take.
Click to expand...

Log in or Sign up

Millions of South Africans impacted by ‘significant data breach’

guest Guest

Log in or Sign up

Millions of South Africans impacted by ‘significant data breach’

guest Guest

Useful Searches