×

We've got news for you.

Register on SowetanLIVE at no cost to receive newsletters, read exclusive articles & more.
Register now

Number of records leaked doubles to 60 million

The largest data leak in South African history has just got bigger.

Troy Hunt‚ the Australian web security expert who first alerted South Africans to the leak‚ said the leak contained the information of just more than 60 million South Africans.

Hunt previously tried to import the records‚ but had not yet managed to process all the information. He has since completed importing all the information.

Troy Hunt on Twitter

My original import of the South African "Master Deeds" data didn't complete. Just ran a complete one: 60,323,827 rows with unique gov IDs.

The leak contains the ID number‚ age‚ location‚ marital status‚ occupation‚ estimated income‚ addresses and cellphone numbers of millions of South Africans‚ both dead and alive.

Hunt has uploaded the e-mail addresses compromised in the data leak to his website HaveIBeenPwnd.com (https://haveibeenpwned.com/) where anyone can enter their e-mail address to see if it has been affected by any worldwide leaks.

The publication has learnt that the dump of personal information — previously estimated at 31.6 million records — includes the income‚ addresses and cellphone numbers of the likes of President Jacob Zuma‚ Finance Minister Malusi Gigaba and Police Minister Fikile Mbalula.

The Hawks and the Department of Home Affairs confirmed on Thursday they would join in the investigation into the leak of the personal information of millions of South Africans.

According to the statement‚ acting Hawks head Lieutenant General Yolisa Matakata instructed its cybercrime unit to lead the investigation.

“The Hawks typically does not comment on ongoing investigations‚ however‚ in light of the intense public interest and the potential impact of this matter‚ the Hawks are collaborating with other law enforcement agencies and stakeholders investigating the data breach‚” she said.

The Department of Home Affairs said government would communicate on the leak via the Hawks.

One of South Africa’s top real estate firms admitted to being the unwitting source of the data hacked in the largest-known personal data breach to date in this country.

The information originated from Jigsaw Holdings‚ which includes Aida‚ ERA and Realty-1.

Aida CEO Braam de Jager said on Wednesday he had “absolutely no idea” how the information was published on the firm’s server. He had consulted a forensic expert to find out how the information was leaked.

“As I am speaking to you now‚ I have called in forensic guys into my office that are busy investigating all of these things right now‚” he said.

De Jager said the information was bought from credit bureau Dracore in 2014 to enable it to trace potential clients who wanted to sell their houses.

Dracore CEO Chantelle Fraser said her company was not responsible for publishing the information and had no knowledge of how other companies used it.

Jabu Mtsweni‚ a cyber security expert at the CSIR‚ said such information could also be sold on the internet to the highest bidder.

“People who want to clone my identity don’t need my ID number. This information can be used by criminals to try to authenticate themselves as you over the phone.”