South Africa’s Information Regulator Probes Cartrack Ransomware Incident
Summary
Cartrack says its customer database, containing contact, bank account and vehicle information, was accessed in an August ransomware incident. Dire Wolf claimed it exfiltrated 500 GB; the Information Regulator is reviewing Cartrack’s preliminary notification.
Key points
- Cartrack says its customer database was accessed during an August ransomware incident.
- The database contains customers’ contact details, bank account information and vehicle data.
- Ransomware group Dire Wolf listed Cartrack on its leak site and claimed to have exfiltrated 500 GB of data.
- Cartrack notified South Africa’s Information Regulator under Section 22 of POPIA.
- The regulator said the notification is preliminary and it is still reviewing its contents and in contact with Cartrack.
Article Details
- Victim Organization
- Cartrack
- Incident Type
- Ransomware incident and data breach
- Data Types Exposed
- Customer contact details
- Bank account information
- Vehicle data
- Affected Records
- Unknown
- Affected Data Size
- Dire Wolf claimed to have exfiltrated 500 gigabytes of data; this amount was not confirmed in the source.
- Operational Impact
- Cartrack said its customer database was accessed. No further operational impact was reported.
- Ransom Or Extortion
- Dire Wolf listed Cartrack on its dark web leak site and claimed data exfiltration. The source does not report a ransom demand.
- Claim Status
- confirmed