JD Group confirms data breach

[rvZA]

I just saw that my info was included in the file, just my email and ID number which isn't a lot but still a cause for concern for me who gets paranoid a lot

Why?

Criminal syndicates walk around with Home Affairs databases with your id number, names, spouse info, addresses, passport info and more. The same syndicates are in possession of updated bank databases from all big banks with your id number, names, addresses, phone numbers, bank account info and more. These syndicates are also in possession of SARS databases with the same information, including your financial information held by SARS. They also have databases with all bonds and personal identifiable information such as properties and addresses you bought and sold. They also have all vehicles you have owned and currently owns including your personal identifiable information such as id number, addresses, telephone numbers and vehicle information. They walk around with all cellphone company databases with your names, id number, addresses and all cellphone numbers registered.

These syndicates have more databases, sell them per hard drive at less than R1k, and here you are being paranoid with a CSV with your e-mail and identity number....

 

[Cranjus McBasketball]

Why?

Criminal syndicates walk around with Home Affairs databases with your id number, names, spouse info, addresses, passport info and more. The same syndicates are in possession of updated bank databases from all big banks with your id number, names, addresses, phone numbers, bank account info and more. These syndicates are also in possession of SARS databases with the same information, including your financial information held by SARS. They also have databases with all bonds and personal identifiable information such as properties and addresses you bought and sold. They also have all vehicles you have owned and currently owns including your personal identifiable information such as id number, addresses, telephone numbers and vehicle information. They walk around with all cellphone company databases with your names, id number, addresses and all cellphone numbers registered.

These syndicates have more databases, sell them per hard drive at less than R1k, and here you are being paranoid with a CSV with your e-mail and identity number....

Damn. The syndicates do a lot of walking around.

 

[rvZA]

Damn. The syndicates do a lot of walking around.

With that type of data on a hdd, damn, i's be running even more.

 

[neoprema]

New leak appeared today for Everyshop. wonder if its a specific one or a dup.

 

[McGuywer]

So will anything every happen to jdgroup regarding this breach?
I have not received a notification or email. Nothing.
Surely, I as a consumer, should be protected?

 

[rvZA]

View attachment 1540237

So will anything every happen to jdgroup regarding this breach?
I have not received a notification or email. Nothing.
Surely, I as a consumer, should be protected?

No. They have no responsibility to protect you. For protection you need to contact the SAPS. From June last year they had the responsibility to protect your data. But then again, this breach happened in 2020. So, nothing will come from it in any event as the POPI Act was not in place at that time.

 

[Ϲhristopher]

Back in 2016 I registered on the Incredible Connection website and received this:


A confirmation email containing my (very secure) password in plain text. I think it's clear that security hasn't been a very high priority for them.

 

[Cranjus McBasketball]

Back in 2016 I registered on the Incredible Connection website and received this:
View attachment 1540573

A confirmation email containing my (very secure) password in plain text. I think it's clear that security hasn't been a very high priority for them.

A friend sent Pepkor's information officer a data destruction request because you can't just delete your account for some reason. Got a reply directing him to a 3 page data request form and

We will send a confirmation email to you within 72 hours of receiving your DSAR request. We will process your DSAR in accordance with legal requirements. The process typically takes up to 30 days to complete, though it can sometimes take longer. You will be notified once your request has been processed.

In other words it's easier to steal data from them than have your account deleted. You could probably learn to hack them and delete it yourself faster.