IOL INVESTIGATION | Stolen South African personal data traded on dark web as breach reports mount
Stolen South African identity documents, bank records and other sensitive files are being offered or published on dark-web leak sites, while thousands of breach notifications have been submitted to the Information Regulator.
South African personal data is being sold on the dark web, according to recent reports. The stolen data includes bank statements, home loan agreements, municipal payroll records, and school files. One batch of 453,362 job seekers' records was advertised for around R34,000 by a hacking group called The Gentlemen. Additionally, LockBit, another ransomware syndicate, has posted confidential client documents from a South African law firm online for anyone to download.
The Information Regulator has received over 8,000 breach notifications, and a former detective stated that the shortage of skilled investigators is the main challenge in tracking down those behind the attacks. Toyota SA Motors, the company behind Lydenburg Toyota, is investigating a ransomware-related incident that affected the dealership's data.
The Gentlemen and LockBit are two of the most active ransomware syndicates in the world, with LockBit targeting four South African organizations since December last year, including Elundini Local Municipality and VSB Attorneys.
Written by urgent.news from IOL's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
