Data leak on UIF coronavirus relief scheme website

[Supervan II]

Please protect me from this government.

 

[Mystic Twilight]

Yeah but the only sensitive info is the UIF number and you can't do anything with it because no ones ID number was leaked. Employees info and stuff weren't leaked.

You could literarily just see how much the company has been paid out. Nothing else. So how do you hack or scam someone with that info?

I would have been concerned if ID numbers, employee salary, company address, telephone number, banking details ect was leaked but a company UIF number. Come on you can't do **** with that.

In theory with the current relaxation of red tape checking on employment status and contribution, combine that uif number and company name with a stolen id number and other details, register a new account on ufiling and declare the stolen id person as an employee with the stolen company uif number, claim for ters as an individual with benefits sent to a stolen/borrowed bank account. Claim for every other possible benefit while you're at it. Rinse and repeat.

 

[cavedog]

In theory with the current relaxation of red tape checking on employment status and contribution, combine that uif number and company name with a stolen id number and other details, register a new account on ufiling and declare the stolen id person as an employee with the stolen company uif number, claim for ters as an individual with benefits sent to a stolen/borrowed bank account. Claim for every other possible benefit while you're at it. Rinse and repeat.

Well maybe but I doubt. First they would need to find the income of the employees. Name. Surname and ID numbers. Then when they register on the ufiling website they need to pass the 5 generated security questions related to credit, employment history, previous address and cellphone numbers. IF they managed to pass all that they would need to somehow generate fake documents from the company including bank stamped statements.

All that for a possible max payout of R6730.

Where will they begin to get the info because none of those details were leaked. It will be impossible.

 

[Mystic Twilight]

Well maybe but I doubt. First they would need to find the income of the employees. Name. Surname and ID numbers. Then when they register on the ufiling website they need to pass the 5 generated security questions related to credit, employment history, previous address and cellphone numbers. IF they managed to pass all that they would need to somehow generate fake documents from the company including bank stamped statements.

All that for a possible max payout of R6730.

Where will they begin to get the info because none of those details were leaked. It will be impossible.

CV applications contain nearly all that personal information (and in the time of layoffs and unemployment, job applicants aren't exactly scarce) and fake documents can be made in photoshop. I'm not saying its a guaranteed get rich quick scheme, im just saying its possible. And you wouldn't hit for a single payout, you farm as many people as possible with a script.