In the midst of a security crisis in South Africa, the Information Regulator chairperson, Advocate Pansy Tlakula, reveals a staggering increase in data breach notifications, surpassing 150 a month. This alarming revelation came to light during a fireside discussion with ITWeb editor-in-chief Adrian Hinchcliffe at the ITWeb Governance, Risk, and Compliance 2024 conference. Tlakula expressed concern over the lack of seriousness regarding cybersecurity among South Africans, emphasizing the escalating numbers and the fertile ground hackers have found in the country.
Last year, Tlakula disclosed around 56 monthly data breaches based on notifications, attributing the surge to the over-processing of personal information of data subjects. However, the situation has worsened, with the current rate exceeding 150 data breach notifications each month. Tlakula stressed the gravity of the situation, labeling data breaches in the country as "very serious" and "scary."
In response to this escalating threat landscape, StormWarning! emerges as a beacon of cybersecurity resilience, offering online NIST cybersecurity audits. StormWarning! stands committed to helping organizations comprehensively understand their cybersecurity risk status. With a dedicated team of experienced professionals, StormWarning! an all South African tailors customized cybersecurity solutions to meet the unique needs and requirements of South African organizations. Enhancing their cybersecurity profile across the entire organizational spectrum to meet the unique SA Cyber environment.
Despite the increasing challenges, the TransUnion security compromise remains a significant concern in South Africa, involving millions of people. The 2022 TransUnion hack, where N4ughtySecTU demanded a $15 million ransom for four terabytes of compromised data, marked a critical moment in the country's cybersecurity landscape. The group claimed access to 54 million personal records, including details of President Cyril Ramaphosa.
South Africa has witnessed a surge in high-profile cyber attacks, affecting credit bureaus, government departments, and banks facing highly organized distributed denial-of-service attacks. The Council for Scientific and Industrial Research estimates annual financial losses of up to R2.2 billion due to cybercrime in the South African economy.
Data from Kaspersky further underscores the prevalence of cyber incidents, with 82% of surveyed South African companies reporting various forms of cyber threats, including 11% caused by deliberate malicious behavior by employees. In this precarious environment, the Information Regulator, led by Advocate Pansy Tlakula, plays a crucial role in enforcing data privacy measures under the Protection of Personal Information Act (PoPiA), striving to safeguard the privacy of South Africans.
As cybersecurity challenges continue to evolve, StormWarning! also stands ready to assist organizations in staying ahead of the threats and fortifying their cybersecurity defenses.
Offences, Penalties and Administrative Fines
Sections 100 – 106 of the POPI Act deal with instances where parties would find themselves “guilty of an offense”. The most relevant of these are:
- Any person who hinders, obstructs or unlawfully influences the Regulator;
- A responsible party which fails to comply with an enforcement notice;
- Offences by witnesses, for example, lying under oath or failing to attend hearings;
- Unlawful Acts by responsible party in connection with account numbers;
- Unlawful Acts by third parties in connection with account number.
- Section 107 of the Act details which penalties apply to respective offenses.
For the more serious offences the maximum penalties are a R10 million fine or imprisonment for a period not exceeding 10 years or to both a fine and such imprisonment.
For the less serious offences, for example, hindering an official in the execution of a search and seizure warrant the maximum penalty would be a fine or imprisonment for a period not exceeding 12 months, or to both a fine and such imprisonment.
Failure to comply with the requirements of the POPI Act could have dire consequences.
This article must be read in conjunction with the POPI Act which can be downloaded from Act No. 4 of 2013 : Protection of Personal Information Act, 2013
Is your organisation ready for the coming CyberSecurity Storm?..
...Best you contact StormWarning! today for a NIST CyberSecurity Audit and we will do our very best to answer that question for you and your organisation, rest assured, we will diligently endeavor to support your organization while adhering to the constraints of your budget.
SOME CYBER SECURITY STATISTICS TO CONSIDER
How many cyberattacks per day?
According to Security Magazine, there are over 2,200 attacks each day which breaks down to nearly 1 cyberattack every 39 seconds.
How many people get hacked each year?
With around 2,220 cyberattacks each day, that equates to over 800,000 attacks each year.
What percentage of cyberattacks include a social engineering aspect versus a technical problem?
According to Cybint, nearly 95% of all digital breaches come from human error.