Shoprite Warns Customers of Data Compromise

By: Bahle Gama and Muzi Dlamini

Customers transferring money to and within Eswatini through Shoprite may be affected by a suspected data compromise.

According to the Shoprite Group, a suspected data compromise impacting a specific sub-set of data had been detected. This may affect customers engaging in money transfers to and within Eswatini, Namibia and Zambia.

The Group has stated that affected customers will receive an SMS to the cell number supplied at the time of the transaction.
An investigation was reportedly immediately launched with forensic experts and other data security professionals to establish the origin, nature, and scope of this incident.

Additional security measures to protect against further data loss were implemented by amending authentication processes and fraud prevention and detection strategies to protect customer data. Access to affected areas of the network has also been locked down. However, the data compromised included names and ID numbers, but no financial information or bank account numbers.

The Group has reportedly notified the Information Regulator and investigations are ongoing. The Group stated that it is not aware of any misuse or publication of customer data that may have been acquired, however, web monitoring relating to the incident continues.

There is a possibility that the impacted customer data may be used by the unauthorized party and customers are advised to follow precautionary measures which entail not disclosing personal information such as passwords and PINs when asked to do so by anyone via telephone, SMS or email.

They have further been urged to change passwords regularly and never share them with anyone else.

“Verify all requests for personal information and only provide it when there is a legitimate reason to do so. Should any unauthorized activity be detected, customers should immediately notify the Group or relevant authorities,” advised the Group.