// INCIDENT · 2022-03 · CREDIT BUREAU
TransUnion South Africa.
Data breach + extortion. Ransom of about $15m (R223m) demanded; TransUnion refused to pay, suspended the client's access and said it would notify affected consumers and offer identity protection.
Date2022-03
SectorCredit bureau
TypeData breach + extortion
Records~54 million records claimed by attackers; not confirmed by TransUnion
AttackerN4aughtysecTU
StatusConfirmed by TransUnion
How the attack happened.
Access to an isolated South African server through misuse of an authorised client's credentials; the attackers claimed the password was "password"
Impact.
Ransom of about $15m (R223m) demanded; TransUnion refused to pay, suspended the client's access and said it would notify affected consumers and offer identity protection.
Primary sources.
- ITWeb (2022-03-17)
- BusinessTech (2022-03-18)
- TimesLIVE (2022-03-18)
Other breaches in the Credit bureau sector.
- Experian South Africa (2020) — Data leak / social engineering