Ampath Laboratories confirms cyberattack, disputes claim of 80 million stolen records
South African pathology group Ampath confirmed a cyber incident and disputed a threat actor's claim to have stolen 80 million records.
- Victim
- Ampath Laboratories
Incidents in country:
South Africa
9 incidents catalogued
South Africa's air traffic agency ATNS probes ransomware-linked malware in its weather and air-navigation network
South Africa's state-owned ATNS said it found ransomware-linked malware in operational-technology systems supporting weather and air-navigation services, with signs of data exfiltration to China.
- Victim
- Air Traffic and Navigation Services (ATNS)
JD Group data breach (2023)
In May 2023, the South African retailer JD Group announced a data breach affecting a number of their online assets including Bradlows, Everyshop, HiFi Corp, Incredible (Connection), Rochester, Russells, and Sleepmasters.
- Victim
- JD Group
- Records
- 521.9K
TransUnion South Africa breach (South Africa, 2022)
Threat actor N4ughtySecTU breached TransUnion South Africa using a client account secured with the password 'Password', then demanded a $15 million ransom. TransUnion confirmed millions of consumers' personal data were compromised.
- Victim
- TransUnion South Africa
Transnet 'Death Kitty' ransomware (South Africa, 2021)
A ransomware attack on South Africa's state-owned logistics firm Transnet shut down operations at Durban, Ngqura, Port Elizabeth and Cape Town container terminals, forcing the operator to declare force majeure. Durban — 60% of Southern Africa's containerised trade — reverted to paper-based clearance for cargo for a week.
- Victim
- Transnet SOC (state-owned freight & port operator)
Experian South Africa data breach (South Africa, 2020)
A fraudster posing as a legitimate Experian client obtained the personal data of 24 million South Africans and 793,749 businesses in what became one of the largest data breaches in South African history.
- Victim
- Experian South Africa
- Records
- 24.0M
ViewFines data breach (2018)
In May 2018, the South African website for viewing traffic fines online known as ViewFines suffered a data breach. Over 934k records containing 778k unique email addresses were exposed and included names, phone numbers, government issued IDs and passwords stored in plain text.
- Victim
- ViewFines
- Records
- 777.6K
Ster-Kinekor data breach (2017)
In 2016, the South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website.
- Victim
- Ster-Kinekor
- Records
- 1.6M
eThekwini Municipality data breach (2016)
In September 2016, the new eThekwini eServices website in South Africa was launched with a number of security holes that lead to the leak of over 98k residents' personal information and utility bills across 82k unique email addresses.
- Victim
- eThekwini Municipality
- Records
- 81.8K