Personal information potentially compromised in ransomware attack, says Justice dept

Source: © weerapat1003 - Fotolia.com

This is according to the department’s Director-General Advocate, Doctor Mashabane.

The ransomware attack left all of the department’s information systems encrypted and unavailable, with the department later recovering some functionality on its maintenance payment system.

“Since the breach occurred, the department analysed the nature and extent of the breach, and has found that there might be personal information that has been accessed or acquired by an unauthorised person/institution, whose identity is currently still unknown.

“The consequences of the breach is the selling of the personal information and its use for unlawful purposes,” Mashabane said.

Experts, State agencies investigate Justice dept IT breach

13 Sep 2021

The Director-General said that those who may have used the department’s services are requested to:

• Review their financial accounts and bank statements;
  
• Keep an eye on bank notifications in terms of purchases made and
  
• Inform law enforcement for any suspected or actual act of identity theft occurs.

No ransom paid to alleged hackers - Department of Justice

21 Sep 2021

Mashabane said the department had introduced measures to prevent a similar attack and strengthen its IT security, including:

• Enhancing access control measures;
  
• Upgrading of IT defensives measures and
  
• Upgrading of anti-virus and anti-malware software.

“The department will ensure that [all those who may be affected] are kept up to date with regard to further investigations of the nature of the personal information that was compromised,” Mashabane said.