Experian – massive personal information data breach!


Nischal Mewalall | CEO | South African Banking Risk Centre (SABRIC) | mail me

Experian – a consumer, business and credit information services agency – has experienced a breach of data which has exposed some personal information of as many as 24 million South Africans and 793,749 business entities to a suspected fraudster.

Experian has confirmed that the breach has been reported to law enforcement and the appropriate regulatory authorities.

Identifying affected customers

Banks have been working with Experian and us to identify which of their customers may have been exposed to the breach and to protect their personal information, even as the investigation unfolds.

We have been cooperating with Experian, together with banks, in their efforts to secure the data and ensure the perpetrators are brought to book.

South African banks take the security of their customer data very seriously and have put in place robust risk mitigation strategies to detect potential fraud on accounts and protect their customers. Banks will communicate with their customers about how they may be affected by the breach and what is being done to protect them.

The compromise of personal information can create opportunities for criminals to impersonate you but does not guarantee access to your banking profile or accounts.

However, criminals can use this information to trick you into disclosing your confidential banking details.

Compromised identity? Alert SAFPS

Should you suspect that your identity has been compromised, apply immediately for a free Protective Registration listing with Southern Africa Fraud Prevention Service (SAFPS).

This service alerts SAFPS members, which includes banks and credit providers, that your identity has been compromised and that additional care needs to be taken to confirm that they are transacting with the legitimate identity holder.

Consumers wanting to apply for a Protective Registration can contact SAFPS at protection@safps.org.za

We urge bank customers and other consumers to follow sound identity management practices to mitigate the risk of impersonation and fraudulent applications in your name.

Think of your identity information in the same way as you think of cash. Keep it safe and secure at all times, because once it is compromised, it can be used by anybody, often to impersonate you.

– Manie van Schalkwyk, CEO, SAFPS

It is also recommended that bank customers follow precautionary measures, including:

  • Do not disclose personal information such as passwords and PINs when asked to do so by anyone via telephone, fax, text messages or even email.
  • Change your password regularly and never share them with anyone else.
  • Verify all requests for personal information and only provide it when there is a legitimate reason to do so.
  • For further advice, please see here



Please enter your comment!
Please enter your name here