It is being reported that a SA government lT leak has caused that close to a million (934,000) personal records of South Africans have been publicly exposed online.
BusinessTech.co.za quotes a report by iAfrikan journalist Tefo Mohapi and ‘Have I been pwned‘ analyst Troy Hunt, who says the leaked data includes, among others, national identity numbers (ID numbers), e-mail addresses, full names, as well as plain text passwords. The leaked data seems to be linked to a online traffic fine-related system.
Mohapi said the data was backed up or posted publicly by one of the companies responsible for online payments of traffic fines in South Africa. “This is yet another reminder of how far our data can spread without our knowledge. In this case, in particular, the presence of plain text passwords poses a serious risk because, inevitably, those passwords will unlock many of the other accounts victims of the breach use.
“This one incident has likely already led to multiple other breaches of online accounts due to that reuse,”said Hunt, quoted by iAfrikan.
Posting on Twitter, Hunt said that more details about the leak will be uploaded to his website shortly, allowing South Africans to check if they have been affected by the breach.
This marks the second major breach in just under a year, with over 60 million South African exposed in a similar data breach in 2017.
It was recently reported that 96,000 South Africans were also affected by the recent Cambridge Analytica breach, indirectly caused by the dodge platform giant Facebook.
The Department of Transport did not comment.