The retail group stated that some customers\u2019 names and ID numbers were potentially leaked, specifically those who performed money transfers to and within Eswatini, Namibia, and Zambia.<\/p>\n
However, RansomHouse soon claimed responsibility for the attack<\/strong><\/a> and demonstrated that it had exfiltrated names, ID numbers, and photographs of people\u2019s government-issued identity documents.<\/p>\n The group claimed it compromised Shoprite\u2019s whole know-your-customer (FICA) database for its money transfer service on 6 June 2022.<\/p>\n To prove its claims, RansomHouse posted 356 files containing customer identity data to its website on the dark web. Compressed, the files are just over 400MB.<\/p>\n RansomHouse threatened to sell the data and leak a portion online unless Shoprite paid up.<\/p>\n It appears Shoprite has refused to communicate with the group.<\/p>\n \u201cWith regards to Shoprite, we\u2019ve made a decision to add more information about how their infrastructure was compromised,\u201d RansomHouse said in a statement on Monday night.<\/p>\n \u201cWe\u2019ll also publish the whole filetree data, so everyone could get the idea of how massive the leak actually is.\u201d<\/p>\n RansomHouse said that Shoprite could easily fix the situation by contacting them.<\/p>\n \u201cWe\u2019ve waited long enough for Shoprite to contact us and prevent the further leak, but they could not have cared less about their clients \u2014 they\u2019ve only promised to notify everyone involved with an SMS,\u201d RansomHouse said.<\/p>\n \u201cThis is the way large corporations prefer to deal with simple folk who entrust their personal data to these giants, not even an apology for violating all possible standards of data protection, not the slightest attempt to fix the situation.\u201d<\/p>\n RansomHouse emphasised that Shoprite\u2019s attackers did not infect the company\u2019s systems with ransomware during the attack.<\/p>\n In its original notice about the breach, Shoprite promised affected customers would receive an SMS to the cell number supplied at the time of the transaction.<\/p>\n Shoprite said it implemented additional security measures to protect against further data loss by amending authentication processes, and fraud prevention and detection strategies to protect customer data.<\/p>\n It also locked down access to affected areas of its network.<\/p>\n RansomHouse claims that Shoprite had left customers\u2019 data wholly unprotected.<\/p>\n \u201cIt\u2019s been quite some time since we encountered something that outrageous,\u201d the group said in an earlier statement.<\/p>\n \u201cTheir staff was keeping enormous amounts of personal data in plain text [and] raw photos packed in archived files, completely unprotected.\u201d<\/p>\n RansomHouse said that apart from know-your-customer data, they also obtained \u201clots of other interesting stuff\u201d.<\/p>\n MyBroadband contacted Shoprite for comment. The company did not respond at the time of publication.<\/p>\n RansomHouse has put Shoprite Money Transfer customer data up for auction after the company apparently refused to communicate with the group.<\/p>\n","protected":false},"author":15,"featured_media":450420,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_sma_x_autopost_status":"idle","_sma_x_autopost_error":"","_sma_x_post_id":"","_sma_facebook_post_id":"","_sma_instagram_post_id":"","_sma_threads_post_id":"","_sma_x_attempts":0,"footnotes":""},"categories":[44696,27],"tags":[26872,35,79138,12679],"class_list":["post-450418","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cryptocurrency","category-security","tag-data-breach","tag-headline","tag-ransomhouse","tag-shoprite"],"_links":{"self":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/450418"}],"collection":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/users\/15"}],"replies":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/comments?post=450418"}],"version-history":[{"count":0,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/posts\/450418\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media\/450420"}],"wp:attachment":[{"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/media?parent=450418"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/categories?post=450418"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mybroadband.co.za\/news\/wp-json\/wp\/v2\/tags?post=450418"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/mybroadband.co.za\/news\/wp-content\/uploads\/2022\/06\/Shoprite-RansomHouse-breach.jpg\")
<\/a><\/p>\n
\nNow read: Vumacam invests R60 million to expand security camera network \u2014 including Alexandra and Soweto<\/a><\/h3>\n","protected":false},"excerpt":{"rendered":"