Vox - Debit-IN Data Breach

[Koosie]

Seems like the company doing debt collection for Vox has experienced a data breach.

Dear Customer,​

Debt-IN, an agency collecting arrears accounts on behalf of Vox, recently experienced a data breach. You can read the Debt-IN media statement here.

The possible consequences of this breach include the sale of personal information and fraud being committed using the compromised, if any, personal information.

In recent months, Debt-IN has made significant investments in enhanced data security systems and skills. As regards the breach, the company has taken immediate and appropriate actions to reinforce existing security measures and to mitigate any further potential impacts of the breach, including assembling a team of highly regarded and globally experienced cyberbreach and forensic experts to work with Debt-IN on the incident.

We advise:

1. You remain vigilant by reviewing your account statements; and
2. Apply for Protective Registration with the SA Fraud Prevention Services
3. You immediately contact law enforcement in the event of actual or suspected identity theft

Vox is currently not aware of the identity of the unauthorised person who may have accessed or acquired your personal information and an investigation is currently underway.


Kind regards,
The Vox Team

TLDR here is Vox was also part of the leak and only advised customers now.

 

[JohnStarr]

Seems like the company doing debt collection for Vox has experienced a data breach.

1. Breach in April.
2. Debt company becomes aware of it in September 2021
3. When did Vox send that message out? And if only now, why have they taken 2 months to do so and notify their clients...

 

[Koosie]

3. When did Vox send that message out? And if only now, why have they taken 2 months to do so and notify their clients...

Half an hour ago...

 

[JohnStarr]

Half an hour ago...

FFS really? MORE of a reason to turf this lot in the coming weeks. That's actually p1ss-poor of them.

 

[Koosie]

Debt-IN Announces Criminal Data Breach Of More Than 1 Million Customer’s Personal Records​

Debt-IN Consultants (Pty) Ltd, a professional debt recovery solutions partner to many South African financial services institutions, has announced that a ransomware attack by cyber criminals has resulted in a significant data breach of consumer and employee personal information.

It is suspected that consumer and personal information of more than 1.4 million South Africans was illegally accessed from Debt-IN servers in April this year, but this breach only came to light last week with the discovery that confidential consumer data and voice recordings of calls between Debt-IN debt recovery agents and financial services customers had been posted on hidden internet sites that are only accessible by a specialised web browser.

Debt-IN is working closely with the regulator, law enforcement agencies and other cyber-security partners to rapidly gather facts, resolve the issue and provide ongoing information to clients.

While the investigations are ongoing and the analysis subject to change, the findings to date show there has been no further breach and enhanced data protection measures remain securely in place.

The company has taken immediate and appropriate actions to reinforce existing security measures and to mitigate any further potential impacts of the breach, including assembling a team of highly regarded and globally experienced cyberbreach and forensic experts to work with Debt-IN on the incident.

“Debt-IN deeply regrets this cyber-attack, and we apologise unreservedly for the inconvenience and anxiety this data breach has caused our clients, and their customers,” says Mark Essey, CEO.

“We are taking this matter very seriously. In this age of highly sophisticated information security threats and an estimated 17 billion cyber attacks around the world every day, Debt-IN is committed to doing all it can to protect clients’ information. We reiterate that we view this attack as the act of malicious cybercriminals. From the time this data breach was detected, our guiding principle has been to put our clients first, and we will continue to do so,” says Essey.

Any concerned customers and clients can direct their enquiries to the company at [email protected] or via a toll-free number: 0800 079 661