Debt-IN Consultants

Debt-IN Consultants, also known as Debt IN Consultants, is a debt recovery firm headquartered in South Africa. The organisation provides debt collection and related services to financial services clients operating within the South African market. Its work involves managing customer accounts, retrieving outstanding debts, and maintaining records that include personal and financial information. As part of its service delivery, the firm records voice interactions between its agents and clients to support verification and quality assurance processes. These activities require the handling of substantial volumes of sensitive data belonging to South African citizens.

In April 2021, Debt-IN Consultants experienced a ransomware attack that compromised its systems and exposed the personal data of over 1.4 million South African individuals. The breach disclosed customer names, contact details, employment and salary information, debt‑related records, and voice recordings of calls between agents and clients. Copies of the stolen data were later discovered on hidden internet sites that are accessible only through specialized browsers. The firm became aware of the incident after a partner identified the leaked information during a routine security sweep. Following the discovery, Debt-IN Consultants collaborated with law‑enforcement authorities to investigate the attack and mitigate further harm. The organisation publicly apologised for the incident, attributed it to malicious cybercriminals, and reiterated its commitment to protecting client data against evolving security threats.