Pam Golding data breach raises questions

Daniel Puchert

Journalist
Staff member
Joined
Mar 6, 2024
Messages
3,336
Reaction score
3,247
Questions about Pam Golding data breach

Several people who received notifications from Pam Golding Properties about a recent data breach say they have never been customers or interacted with the company in any way, asking how it obtained their information in the first place.

Pam Golding recently notified many people that their personal details were accessed after its customer relationship management (CRM) system, Alchemy, was accessed by an unauthorised and as-yet unknown third party.
 
Blacklisted their domain many years ago as they were clueless. Seems I have not missed anything.
 
Several people who received notifications from Pam Golding Properties about a recent data breach say they have never been customers or interacted with the company in any way, asking how it obtained their information in the first place.
From a database. Were these people born yesterday?
 
I've request for years they remove my information and stop spamming me. I've had confirmations to this effect.

I received the notification my information was part of the breach.

POPI complaint to follow - not that it seems to make a difference.

(side note, this all started with a horrible estate agent who wouldn't take no for an answer, when I told her to stop phoning, and blocked her number - she rocked up demanding to see me, all while my wife was home, struggling with 3 week premature baby, and a husband (me) - completely down and locked in the bedroom with shingles)
 
As I suspected. The very definition of a 'spam' database:
“It was not limited to someone who transacted through the company,” the spokesperson said.

“This includes anyone with whom we have had telephonic contact regarding their enquiry or enquiries and who has then opted out — in order that we can ensure they are not contacted again via any of our offices.”
 
No way... I'd tell them where to get off.

If I had answered the door that day I would have gone to jail.

We were renovating, and didn't have a house when the baby arrived three weeks early, she went into NICU and Discovery started fighting with me because she wasn't on our policy, and they couldn't add her because we couldn't give them her ID number, therefore they wouldn't approve it with the hospital (she was not even 24 hours old).

So in-between finishing the renovations, baby in ICU, trying to sort out Discovery, and back and forwards to the hospital - I had this woman constantly phoning to sell us a house we decided we didn't want.

When the shingles hit, it was misdiagnosed as pink eye (started behind my eye), so when they finally figured it out, I felt like I was dying. I think it was the longest two weeks of my life. (they said the shingles was most likely because of all the above)
 
If I had answered the door that day I would have gone to jail.

We were renovating, and didn't have a house when the baby arrived three weeks early, she went into NICU and Discovery started fighting with me because she wasn't on our policy, and they couldn't add her because we couldn't give them her ID number, therefore they wouldn't approve it with the hospital (she was not even 24 hours old).

So in-between finishing the renovations, baby in ICU, trying to sort out Discovery, and back and forwards to the hospital - I had this woman constantly phoning to sell us a house we decided we didn't want.

When the shingles hit, it was misdiagnosed as pink eye (started behind my eye), so when they finally figured it out, I felt like I was dying. I think it was the longest two weeks of my life. (they said the shingles was most likely because of all the above)

Couldn't you just call your security company and have her detained while SAPS arrived and then charged her with trespassing?
 
Couldn't you just call your security company and have her detained while SAPS arrived and then charged her with trespassing?

I was passed out - wife didn't even tell me until I recovered. If she ever came back I would have called armed response though.

EDIT: I despise estate agents with a passion, not Pam Golding in this case - but - we had another estate agent try and forcefully gain access to our property. Our domestic wouldn't let them in - and had to lock herself in the house. This time I called armed response, and I had to leave work in Diep River for Blouberg.

Unfortunately armed response missed them - when I got home I checked the cctv - watched them trying to climb a wall (yay for electric fence, put their hands through the post box to unlatch the door, etc) - then I noticed their branded vehicle in the driveway.

I called them up to ask wtf - the woman said they had the wrong address, and were meant to prepare the house for a show house, but "its ok because they're estate agents in the area, so it wasn't a risk". (obviously weren't very good because they only lasted a few years)
 
Last edited:
I flagged the email to follow-up at some point (which turned out to be a few minutes ago), initially I thought the breach email was a phishing scam, mainly because I didn't know that "Pam Golding Properties (Pty) Ltd" still existed after Pam herself ceased to exist (which I vaguely remembered, although I have never been a client of company itself - valued or otherwise).

“This includes anyone with whom we have had telephonic contact regarding their enquiry or enquiries and who has then opted out — in order that we can ensure they are not contacted again via any of our offices.”

Dear hated estate agency company that I have never ever been a client of, I realise this is a very strange concept, but not keeping my illegally obtained personal information in your breached alchemy "database" (probably an Excel spreadsheet I'm sure that you use to turn illegally obtained and stored personal information into "gold"), is the best way of ensuring that you never ever contact me.

“It was not limited to someone who transacted through the company,” the spokesperson said.

Kindly join your maker in ceasing to exist, at least your founder was useful for pushing up the daisies, as a dead company you aren't even useful as fertiliser.

1742136360778.png
 
Last edited:
So after a popia complaint, Pam Golding responded that basically they won't remove personal information because then they won't know that you've opted out of direct marketing.

Funny that their agents still direct market though,
 
As I suspected. The very definition of a 'spam' database:

Not sure if it's a "spam" database per se, but here is one such database that contains owners details that a lot of the estate companies use,


apparently collates data from various sources including the deeds office.
 
Top
Sign up to the MyBroadband newsletter
X