Armaments Corporation of South Africa

Armscor, also known as the Armaments Corporation of South Africa, is headquartered in South Africa and operates as a defense procurement agency. The organization manages transactions and contracts between the South African government and various aerospace and defense contractors. Its core function involves processing invoice numbers, order details, and financial amounts within the defense sector. Armscor's settlement system facilitates payments and logistical arrangements for armaments and related equipment. By centralizing procurement, it supports national defense requirements through coordinated acquisitions from major industry suppliers. The agency's work ensures that military and security forces obtain necessary materials and services. Its role is critical in maintaining defense supply chains within South Africa. Transactions handled by Armscor often involve substantial financial records and sensitive supplier information. The corporation thus serves as a key intermediary in the country's defense industrial base.

In 2016, Armscor experienced a significant security incident when Anonymous hacktivists compromised its systems through an SQL injection attack. The breach resulted in the exfiltration of HTML files containing detailed transaction records and unauthorized access to supplier credentials stored in plaintext. This event highlighted vulnerabilities in the agency's settlement system, which allowed intruders to navigate without passwords for certain functions. Although email credentials were not exposed, the leak of financial data and login details underscored risks in handling procurement information. The incident was part of a broader campaign targeting defense sector entities globally. It demonstrated Armscor's exposure to cyber threats due to its operational profile. No quantitative metrics about the organization's size or reach are provided in available sources, but its function as a national procurement body implies a substantial footprint within South Africa's defense landscape. The corporation's handling of plaintext credentials revealed procedural weaknesses that are notable in assessing its security posture.