Govchain, a firm that offers online registration and compliance services to businesses in South Africa, has suffered a data breach, and it says the incident may have compromised customers’ personal information.
In an email notice to affected customers, Govchain confirmed it had secured the affected system and launched an investigation upon discovering the breach.
The breach reportedly impacted documents required for Financial Intelligence Centre Act (FICA) verification and register record sharing, potentially exposing sensitive customer data.
Govchain responded by blocking access to all servers, deactivating applications, and engaging cybersecurity experts to conduct a thorough investigation. The company is also working with relevant authorities to identify the perpetrators.
What they are saying
“Our internal monitoring system flagged the incident due to an unusual volume of errors. Upon discovery, we immediately secured the affected system and launched an investigation,” it said in the notice.
“While we have no evidence that your personal information has been misused, there is a possibility of unauthorised access.”
“Steps already underway include engaging industry-leading experts to assess and enhance our systems and conducting a thorough review of our security protocols.”
Precaution measures
The company has warned customers to action the following action as it could lead to increased phishing attempts or fraudulent activities:
- Monitor online accounts and profiles for unusual activity;
- Be wary of unsolicited emails or calls asking for sensitive information; and,
- Look for unauthorised logins, unexpected password changes, or new accounts registered in your name.
The way forward
This incident highlights the growing cybersecurity challenges businesses face in Africa, particularly those handling sensitive financial and personal data.
It also underscores the need for robust cybersecurity frameworks to protect customer information and mitigate future risks.
Source: MyBroadband