Dis-Chem has been found guilty of contravening the Protection of Personal Information Act.
The Regulator’s assessment found that Dis-Chem failed to identify the risk of weak passwords, didn’t have sufficient monitoring, and didn’t have an operator agreement with its provider that ensured sufficient security measures were in place.Responding to the enforcement notice, Dis-Chem issued a statement disputing the accuracy of some of the Regulator’s allegations.
“The company confirms that the data held by the third-party provider was restricted to mailing details only and did not contain any sensitive medical, financial, or banking information,” it said.Around April and May 2022, Dis-Chem’s third-party service provider, Grapevine, suffered a “brute force attack”, which is an action aimed at cracking a password by continuously trying different combinations until the right combination is found.
Malaysia Latest News, Malaysia Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Dis-Chem ordered to fix security problems or face R10-million fine after data breachThe Information Regulator has revealed the name of the third-party service provider Dis-Chem previously said was breached.
Read more »
Dis-Chem hits back at privacy watchdog over data breach findingsDis-Chem has disputed the accuracy of some of the Information Regulator’s allegations.
Read more »
Information Regulator pursues Dis-Chem over data breachThe Information Regulator has issued Dis-Chem with an enforcement notice for various contraventions of Popia.
Read more »
Dis-Chem must address hack that hit 3.6m customers or face hefty penalty, watchdog rulesThe Information Regulator has ordered Dis-Chem to take remedial action to address a hack that led to the personal data of 3.6 million customers being breached last year or face a fine of up to R10 million.
Read more »
Will Hybrid be the Break in the Clouds for Data Protection? - IT News Africa | Business Technology, Telecoms and Startup NewsIt’s no secret that the African continent is a highly cost-sensitive region, and many organizations have found solace in the....
Read more »
Commvault Connections Live 2023: Unveiling the Future of Data Protection and Collaboration - IT News Africa | Business Technology, Telecoms and Startup NewsCommvault, a global leader in enterprise data management and data protection, once again hosts its highly anticipated Connections Live
Read more »