Cyber Incident Victim: Experian
Date:
Aug 2020
Location:
South Africa
Summary
A major data breach at Experian compromised personal information belonging to approximately 24 million South African individuals and nearly 800,000 business entities, with the exposed data accessed by a suspected fraudster. The incident was reported to law enforcement and regulators, with financial institutions collaborating to identify affected customers and implement protective measures during the investigation. While no consumer credit or financial data was obtained, the perpetrator allegedly intended to misuse the stolen information for marketing insurance and credit-related services illicitly.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
Experian, a consumer, business, and credit information services agency, experienced a data breach around August 2020 that exposed personal information belonging to approximately 24 million South African individuals and 793,749 business entities. The incident involved unauthorized access by a suspected fraudster who obtained the data, though Experian clarified no consumer credit or financial information was compromised. The company confirmed the breach in a public statement on August 19, 2020, and promptly reported the incident to law enforcement agencies and relevant regulatory authorities in South Africa. Experian collaborated with major banks and the South African Banking Risk Centre (SABRIC) to identify customers potentially affected by the breach and implement protective measures for their personal information during the ongoing investigation. The suspected perpetrator intended to use the stolen data to offer insurance and credit-related services fraudulently, according to Experian's assessment shared with media outlets.
The breach triggered coordinated efforts between financial institutions and cybersecurity organizations to mitigate risks to affected individuals and businesses. While the exact method of unauthorized access remained undisclosed, Experian maintained transparency about the breach's scope by publicly confirming the number of impacted parties. SABRIC worked alongside Experian and banking partners to monitor for potential misuse of the exposed personal information, which could include identity theft or targeted scams. The incident highlighted vulnerabilities in large-scale data repositories holding citizen information, though no evidence emerged suggesting broader dissemination of the stolen data beyond the initial suspect. Investigations continued as financial institutions implemented additional safeguards for customer accounts, emphasizing preventive actions rather than confirmed cases of fraud resulting directly from the breach at the time of reporting.