Cell C warns fibre customers about possible data breach
Cell C has notified customers who use its fibre Internet service provider that their data may have been compromised in a possible data breach or leak.
“We are writing to inform you that on 9 September, a third-party service provider that supports parts of our Cell C Fibre customer environment reported a cybersecurity incident,” it said.
“The service provider has advised that they have identified that their access credentials were compromised, resulting in certain customer records being accessed.”
It said that, based on the information available, the affected records were limited to customer names, email addresses, mobile numbers, and Cell C customer account numbers.
“Our investigations are ongoing, and any change to this position will be communicated,” Cell C told fibre customers.
Cell C said it immediately activated its incident response procedures upon becoming aware of the incident.
“Cell C is working with the third party and its cybersecurity specialists to contain the risks and investigate the matter,” it said.
The notification from Cell C follows similar notifications from EasyEquities and Bidvest Bank to their customers about a cyber incident at a third-party service provider.
“As part of our client verification process, EasyEquities uses a third-party service provider to conduct verification checks in line with regulatory obligations,” EasyEquities said.
“We are writing to inform you that this third-party service provider has experienced a cybersecurity incident potentially affecting customer information.”
It said its internal investigation found no evidence that any EasyEquities or Purple Group systems were compromised.
There has also been no impact on customers’ account security or their ability to invest. EasyEquities said it had not yet received the final findings of the third-party investigation.
Similarly, Bidvest Bank did not reveal what data was potentially exposed or which provider was breached, saying only that it held “limited categories” of customer data.
Affected customers should be on guard
While none of the impacted companies could provide customers with much detail about the possible breach, they offered general advice on precautions they should take in the meantime.
Cell C said the possible consequences of the incident include unsolicited contact by individuals pretending to represent Cell C, financial institutions, retailers, or other trusted organisations.
They could also receive phishing emails designed to obtain additional personal information, as well as fraudulent SMS messages (smishing) containing malicious links or requests for information.
Customers could also face increased scam telephone calls seeking to persuade them to disclose passwords, one-time passwords (OTPs), or other sensitive information, Cell C warned.
Additionally, they could experience increased marketing, spam, or unwanted communications if unauthorised parties misuse their personal contact details.
“Be aware that the information may be used to market products to you. Exercise caution when responding to unsolicited direct marketing communications received via SMS, email or cell phone,” it said.
“Remain vigilant for suspicious emails, SMS messages or calls claiming to be from Cell C and report them to [email protected].”
“Do not share passwords, OTPs or personal information in response to unsolicited communications.” Cell C said customers should verify any requests for account information through official Cell C channels.
Loading ...