eThekwini Municipality data breach

The eThekwini Municipality breach happened on September 7, 2016 and exposed 81,830 accounts. 11 kinds of data were exposed.

Overview

Site

eservices.durban.gov.za

Breach date

September 7, 2016

Recorded on

September 15, 2016

Accounts exposed

81,830

Exposed data

Dates of birth, Deceased date, Email addresses, Genders, Government issued IDs, Names, Passport numbers, Passwords, Phone numbers, Physical addresses, Utility bills

Risk score

95 out of 100

Risk based on the exposed data

This breach scores 95 out of 100. The score is driven mostly by Passwords, Government issued IDs, Passport numbers.

Breaches from the same period

• uuu9 (2016-09-06, 7,485,802 accounts)
• Real Estate Mogul (2016-09-06, 307,768 accounts)
• Digimon (2016-09-05, 7,687,679 accounts)

What affected users should do

• Change your eThekwini Municipality password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
• Turn on two-factor authentication for your login.
• Phone numbers were exposed, so watch out for impersonation by text message or phone call.
• ID numbers were exposed, so watch out for contracts signed in your name.

Create a new password →