It turns out SA’s largest recorded data breach was traced to a Web server registered to a real estate company based in Pretoria, Jigsaw Holdings. They are a holding company for several real estate franchises including Realty1, ERA and Aida. Apparently, this website had exceptionally lax security and contained a database of 75 million records, including the records of 60 million SA citizens.
It seems that hacking wasn’t required to get access to these records as the information was easily accessible on an open Web server. The same credentials were used everywhere and allowed full administrator access across all the databases on the server. All personal data was contained in a single database in clear text. It indicates an overall lack of even the most basic security awareness.
Jigsaw Holdings missed the mark on so many levels, information governance and security was never considered.
How to prevent a data breach in your business
What are the basic things you should know in your business?
- Know what information you have.
- Know where you keep it.
- Know who has access to it.
Once you have answers to these questions, you can start planning the best way to protect your data.
Here are some really useful free resources you can start using today
- Start identifying risks and implementing the small changes you can make immediately. Download our top data security tips for small businesses for free. It will give you an action plan that you can implement immediately!
- If you have had a data breach, don’t panic. We’ve assembled a to-do list that you can use to make sure you handle the situation like a pro. Here’s what you need to do.
- If you haven’t had a breach – be proactive. Get in touch with us today, and we’ll get you started on a risk assessment. We will give you a free hour-long consultation.
- If you’d like more useful, usable info about protecting personal information, the Protection of Personal Information Act, sign-up for our monthly newsletter. Of course it comes with a no-spam guarantee!
This article was reposted with the permission of Novation Consulting.