Ster-Kinekor.
Data breach. Data classes exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses, Spoken languages. Source: haveibeenpwned.com.
How the attack happened.
In 2016, the South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website. Whilst more than 6 million accounts were leaked by the flaw, the exposed data only contained 1.6 million unique email addresses. The data also included extensive personal information such as names, addresses, birthdates, genders and plain text passwords.
Impact.
Data classes exposed: Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses, Spoken languages. Source: haveibeenpwned.com.
Primary sources.
- haveibeenpwned.com (2017-03-13)
Other breaches in the pending review sector.
- JD Group (2023) — Data breach
- Experian (South Africa) (2020) — Data breach
- ViewFines (2018) — Data breach