Registry of South Africans Abroad database vulnerability

The Department of International Relations and Cooperation (Dirco) database for its Registration of South Africans Abroad (ROSA) programme has suffered a major security vulnerability which exposed the data of those who registered online.

Information that travellers register on ROSA lets the Department help South African citizens in event of an emergency. The service is available to South Africans who are travelling, living, or working abroad.

The department promises to assist registered users by locating them, verifying their status, and liaising with their next-of-kin during an emergency.

One user who recently tried to register their details encountered an error on the site, and upon trying to restart the process found they were able to access the private details of a number of people who were registered on the system.

Exposed details included names, telephone numbers, e-mail addresses, trip information, emergency contact information, and passport numbers.

Dirco said its IT unit has been alerted to the possible vulnerability of the ROSA system. “They are working to address any issues with the site,” said Dirco, adding that it expects the issue to be addressed by the end of the week.

More security news

Hacker Batman may be out there, watching over your ADSL router

ANC-linked businessmen bought super cellphone spying device

Beware of these ATM Insert Skimmers which steal your bank card information

Don’t fall for these scams in South Africa

How you can protect yourself from debit order fraud in SA