// INCIDENT · 2023-05 · PENDING REVIEW

JD Group.

Data breach. Data classes exposed: Email addresses, Government issued IDs, Names, Phone numbers, Physical addresses. Source: haveibeenpwned.com.

← All tracked breaches
Date2023-05
Sectorpending review
TypeData breach
Records521,878 accounts (HIBP)
Attackersee HIBP writeup
StatusCONFIRMED (HIBP)

How the attack happened.

In May 2023, the South African retailer JD Group announced a data breach affecting a number of their online assets including Bradlows, Everyshop, HiFi Corp, Incredible (Connection), Rochester, Russells, and Sleepmasters. The breach exposed over 520k unique customer records including names, email and physical addresses, phone numbers and South African ID numbers.

Impact.

Data classes exposed: Email addresses, Government issued IDs, Names, Phone numbers, Physical addresses. Source: haveibeenpwned.com.

Primary sources.

Other breaches in the pending review sector.

Would your business survive this happening to you?

Most SA SMBs do not have the detection or incident-response capability to answer that honestly. We can help you work out where your real gaps are.

Talk to us → See our cybersecurity services