Personal details of 24 million South Africans breached – Are you one of them?

UPDATE: Fraudster who breached personal details of 24 million South Africans has been found

The massive data breach of an information services agency has exposed the personal details of as many as 24 million South Africans and 793 749 businesses, The Citizen reports.

A suspected fraudster managed to breach information from Experian, a consumer, business and credit information services agency. The news emerged on Wednesday.

The breach has been reported, and banks are working with Experian and the South African Banking Risk Information Centre (Sabric) to identify which customers have been affected by the breach.

Sabric CEO Nischal Mewalall explained that the breach does create opportunities for criminals to impersonate those exposed, but “does not guarantee access to your banking profile or accounts”.

However, he warned that criminals could use customers’ information to trick them into disclosing confidential banking details.

First National Bank (FNB) has advised customers to be “extra vigilant” and to follow recommended security precautions. The bank is working with Sabric and the Banking Association of South Africa to mitigate potential risks facing customers.

Customers who have been affected by the breach will be contacted by FNB directly.

Absa bank assured it has put necessary precautionary measures in place to protect customers, and will contact them directly should any suspicious activity be detected.

Clients are urged to contact the fraud hotline on 0860 557 557 should they pick up any unusual activity.

The bank warned that criminals will attempt to deceive unsuspecting customers into disclosing passwords, online pins, card pins, card CVV numbers, one-time pins and/or authentication messages.

“Fraudsters might also try to influence consumers’ rational thinking by causing excitement, distress and urgency,” they said.

Those who suspect their identity has been compromised should apply for free identity protection with the Southern African Fraud Preventions Services (SAFPS), which provides “additional care” when confirming transactions, and alerts banks and credit providers that your identity may have been compromised.

SAFPS CEO Manie van Schalkwyk strongly advised to keep identity information safe and secure at all times, “because once it is compromised, it can be used by anybody, often to impersonate you”.

“Think of your identity information in the same way as you think of cash”, she added.

Here are some useful tips to keep your identity safe: 

• Never disclose personal information to anyone via telephone, text or email;
• Change your passwords regularly, and do not share them with anyone;
• Only verify requests for personal information when there is a legitimate reason to do so;
• Follow your bank’s recommended security precautions for online banking.

If you think your data has been breached, email SAFPS at protection@safps.org.za, or SMS the word “Protectid” to 43366. For more information, visit the SAFPS website.