FLIP’S AUTO ELECTRICAL Section 22 of the Protection of Personal Information Act, 4 of 2013 Data Breach Notification:
Please be advised that Flip’s Auto Electrical (Pty) Ltd takes the issue of personal information and protection thereof very seriously. Every possible precaution is taken to protect personal data and we actively work to avoid any data protection breaches that could compromise our data security.
Unfortunately, we hereby notify you in accordance with section 22 (1) (a) of the Protection of Personal Information Act, 4 of 2013 (POPI) and all other applicable data protection laws and regulations, that Flip’s Auto Electrical (Pty) Ltd has fallen victim to a cyber hack and that there are reasonable grounds to believe that the personal information of some data subjects have been accessed, deleted, or acquired by an unauthorized external party.
Nature of data breach:
On 01 August 2024 it was noticed while doing reconciliation of our accounts that there were various proof of payments, however it did not correspond with the account statements. It was noticed on SAP that our banking details were changed from ABSA to Nedbank, whereby we informed the factories which confirmed it was paid into a Nedbank account and that emails were received from charne@faegroups.co.za stating the change of bank details, however this was not authorized or neither was this an email from us.
Following the investigation, the likely consequences of the information breach are that:
• Unauthorized persons may subsequently have had access to your or other individuals’ or entities’ personal information via the emails.
• Unauthorized persons are able to contact recipients through the email addresses listed in the email correspondence.
Measures taken to prevent similar data breach:
As part of this data security incident and bearing in mind the type of information or data relating to the incident, we have carried out a full investigation. We are of the opinion that further unauthorized access to the information is highly likely, however in future we will take better precaution to ensure that the information is always password protected and the device containing the information is stored safely as far as reasonable possible, furthermore we will also indicate on our invoices that the client needs to make sure before making payment that our banking details are correct.
To mitigate the risk that such data compromise could pose, we conducted a full risk assessment to further strengthen the appropriate processes and organisational measures in place to prevent unlawful access to information held by us.
In the meantime, our company will continue its investigation into this matter and take all steps available to maintain confidentiality, prevent loss, unauthorised access and damage to information by unauthorised parties.
We take the protection of personal information seriously and want to reaffirm our commitment to the processing of your personal information in accordance with the provisions of the POPI Act.
Please contact our Information Officer should you require any further information pertaining to the breach.
Information Officer
Name: Charne Fourie
Contact number: 016 976 3685
Email Address: fouriecharne08@gmail.com