// INCIDENT · 2020-08 · CREDIT BUREAU

Experian South Africa.

Data leak / social engineering. Personal information exposed; Experian said no credit or financial information was obtained and its systems were not compromised. The suspect's hardware was impounded under an Anton Piller order and the data deleted.

← All tracked breaches
Date2020-08
SectorCredit bureau
TypeData leak / social engineering
RecordsUp to 24 million individuals and 793,749 business entities
AttackerIndividual posing as a legitimate client
StatusConfirmed by Experian

How the attack happened.

Social engineering: the suspect fraudulently requested data from Experian while purporting to represent a legitimate client

Impact.

Personal information exposed; Experian said no credit or financial information was obtained and its systems were not compromised. The suspect's hardware was impounded under an Anton Piller order and the data deleted.

Primary sources.

Other breaches in the Credit bureau sector.

Would your business survive this happening to you?

Most SA SMBs do not have the detection or incident-response capability to answer that honestly. We can help you work out where your real gaps are.

Talk to us → See our cybersecurity services