Experian data breach - Database with sensitive information discovered online

Why is the leak shared online, where was the database dumped?

Experian needs to be honest now.
 
1599039233491.png
RSAID
Forename1
surname
CS_File_number
CS_CST_HomeAffairsRSAIDVerf
CS_CELL_PHONE_1
CS_CELL_PHONE_2
CS_CELL_PHONE_3
CS_HOME_PHONE_1
CS_HOME_PHONE_2
CS_HOME_PHONE_3
CS_OTHER_PHONE_1
CS_OTHER_PHONE_2
CS_OTHER_PHONE_3
CS_WORK_PHONE_1
CS_WORK_PHONE_2
CS_WORK_PHONE_3
CS_EMAIL
CS_EMAIL_RANK
CS_Employer
CS_OCCUPATION
CS_Date
CS_EMP1_EMP_NAME
CS_EMP1_DATE_CREATED
CS_EMP1_OCCUPATION
CS_EMP2_EMP_NAME
CS_EMP2_DATE_CREATED
CS_EMP2_OCCUPATION
CS_EMP3_EMP_NAME
CS_EMP3_DATE_CREATED
CS_EMP3_OCCUPATION
CS_Address1_Line_1
CS_Address1_Line_2
CS_Address1_Line_3
CS_Address1_Line_4
CS_Address1_Town
CS_Address1_PostCode
CS_Address1_Province
CS_Address1_Update_Date
CS_Address2_Line_1
CS_Address2_Line_2
CS_Address2_Line_3
CS_Address2_Line_4
CS_Address2_Town
CS_Address2_PostCode
CS_Address2_Province
CS_Address2_Update_Date
CS_Address3_Line_1
CS_Address3_Line_2
CS_Address3_Line_3
CS_Address3_Line_4
CS_Address3_Town
CS_Address3_PostCode
CS_Address3_Province
CS_Address3_Update_Date
 
Just to add, it is good that the leak have been shared online because this allows those exposed to take appropriate action pending on whether they are willing to do so.

However, Experian said many other things in regard to this leak... It is time now that they are held accountable.
 
Experian offer free credit check to see if someone is using your identity for credit.
BUT since I've done that, I've bee harassed on a daily basis with phone calls from debt management agencies.
This seems like Experian is dishing out my info to agencies anyway.
You fell for that data harvesting trick?
:ROFL: :ROFL: :ROFL: :ROFL:

Your information is like gold to them - you are the product - they sell your data.

They provide 2 services designed to harvest as much information from you (far worse than Facebook).
  • mycreditexpert,co,za - "Free" Experian credit report and score / "Improve" your credit score
  • ProtectMyID - not sure if it's available in ZA, they alert you when someone applies for credit using your stolen Experian identity theft data.
The T&C are about 8 pages of small print, and seems:
They broke the NCA
They broke the POPI act.
etc

Best you do is protest outside their work at:
Experian House, Ballyoaks Office Park, 35
Ballyclare Drive, Bryanston
Telephone nr: 012 799 3400
 
Experian data breach - Database with sensitive information discovered online

Personal data exposure notification service Have I Been Pwned? has sent notifications to over a million South Africans regarding a data breach that has been connected to Experian.

The South African Banking Risk Centre (SABRIC) announced on 19 August that a data breach at Experian exposed the personal banking-related information of as many as 24 million South Africans and nearly 793,749 businesses.

As much as anything, what makes me angry about this whole thing is the fact that these companies like Experian hold all our details like this without our permission. Have you ever said to any such company, 'please keep all my information for credit rating'? Nope. So they have collected all this data on us, which is really private information when you think about it, and they are cavalier about keeping it safe too? And cavalier about how and when exactly the information was handed to 'someone' masquerading as a legit client. Who allowed that to happen? Who did not check the credentials of 'the person' the information was given to, and in any case, how does it come to the fact that millions of people's information was handed to one such person? It beggars belief. What come back do any of us have for what has happened? Nothing, I bet. I know I was affected as I suddenly started receiving emails that were spam and cons - like some person reckoning they had taken salacious photos with my computer camera and so on and so forth. Sadly many would take that as real, and not ignored it and blocked the sender. There is so much wrong with all our private information even being held by such companies especially with the awful scam and con companies and individuals operating globally, who care nothing for the people they con.
 
Experian : We were not hacked.

Reality: Experian gives customer data in digital form over to stranger.

Experian:
“Our investigations also show that the suspect had intended to use the data to create marketing leads to offer insurance and credit-related services"
We seized the hardware that the suspected fraudster had stored the personal information in, which was then deleted.

Reality: Experian Database appears on the internet
 
What would be a good article is if somebody contacts the banks and telco providers and ask them if they still provide information to Experian after this information came to light?

You fell for that data harvesting trick?
:ROFL: :ROFL: :ROFL: :ROFL:

Your information is like gold to them - you are the product - they sell your data.

They provide 2 services designed to harvest as much information from you (far worse than Facebook).
  • mycreditexpert,co,za - "Free" Experian credit report and score / "Improve" your credit score
  • ProtectMyID - not sure if it's available in ZA, they alert you when someone applies for credit using your stolen Experian identity theft data.

That is not where they get the majority of your data. It is provided by banks, telcos etc. These big companies send monthly information about their customer's payment or non-payment of credit contracts/cell phone contracts. The data is then used for credit checks and other nefarious purposes.
 
What would be a good article is if somebody contacts the banks and telco providers and ask them if they still provide information to Experian after this information came to light?



That is not where they get the majority of your data. It is provided by banks, telcos etc. These big companies send monthly information about their customer's payment or non-payment of credit contracts/cell phone contracts. The data is then used for credit checks and other nefarious purposes.
Correct - a lot of the volume of data they get is 2nd hand and has inaccurate, conflicting or or outdated information.
Any data they get from you is 1st hand, accurate and this is more valuable.
 
Experian is in the credit verification nbusiness, as well as in the business of selling all the data collected. Just check on their website. It covers the following:
About Experian
1. We unlock the potential of data and offer solutions to optimise your customer relationships - Experian’s comprehensive B2C marketing database (email & direct mail addresses) provides a compliant method for your customer contact
2. A compliant method for your consumer prospecting needs
3. Media Trading Services - By using the power of Experian data insights to really understand your target segments
4. Improve your email campaign effectiveness - By cleaning your customer database with our email validation tools
 
Is it really a breach if the only thing that the perpetrator did wrong was not pay Experian for the data? They basically admitted that they share the data with their clients...
It is very clear that Experian has lied about the extent and circumstances of this breach of personal and confidential data.

Experian could well have been lying about not being hacked, and Experian "investigating" itself simply does not cut it.

Giving out millions of data records to one or more fraudsters, and then lying about the extent of the data points contained therein, is very serious.

Presumably Experian is registered (with the FSB) as a "financial services provider", I would be surprised if there isn't good cause to temporarily suspend Experian's financial services licence at least until Experian and its actions have been fully investigated, also have court orders issued to prevent Experian from selling personal and confidential data.

The banks should be suspending their commercial ties with Experian and conducting their own investigations.
 
^^^^
Dream on. Maybe in a perfect world....

Not gonna happen when these huge, globally interconnected institutions who are in cohoots feed off each other for their daily business.

End of.
 
It's probably no surprise that I have been bombarded with spam since the breach happened:

Screenshot_2020-09-03-11-30-39-558_com.google.android.apps.messaging.jpg
 
Top
Sign up to the MyBroadband newsletter
X