A ransomware gang known as RansomHouse has claimed responsibility for the cyberattack on Shoprite, Africa’s largest retailer. The attack compromised customer data in Eswatini, Namibia, and Zambia.
Details of the Attack
Shoprite confirmed the attack a week ago and stated that it had compromised customer data, including names and ID numbers, but no financial information or bank account numbers. The company said an investigation was immediately launched with forensic experts and other data security professionals to establish the origin, nature, and scope of this incident.
RansomHouse’s Claims
In messages posted on RansomHouse’s Telegram channel and seen by TechCrunch, the gang claimed to have obtained 600 gigabytes of data from Shoprite. They stated that they had collected personal data in plain text/raw photos packed in archived files, completely unprotected. The group also claimed to have contacted Shoprite’s management for negotiations and hinted that it will sell the data and make some of it public if the talks failed.
Response from Shoprite
TechCrunch reached out to Shoprite to confirm if RansomHouse had made contact with them and to get more details, including the number of customers affected by the attack. The retailer declined to comment while referring us to their statement following the incident.
In the statement, Shoprite said additional security measures were implemented to protect against further data loss. Access to affected areas of the network was locked down, and authentication processes and fraud prevention and detection strategies were amended to protect customer data. The group urged affected customers to take precautionary measures while saying that it had not noted any misuse or publication of the data.
Shoprite’s Financial Performance
Shoprite is Africa’s largest chain retailer with 2,933 stores as of February this year. Its brands include Shoprite, Usave, LiquorShop, Checkers, Checkers Hyper, and House & Home. The retailer has a strong financial performance, with its operating profit rising last year by 19% (in the financial year ended July 4) to 9.7 billion rand ($681 million).
Cybersecurity Concerns
The attack highlights concerns about cybersecurity in Africa. As companies continue to digitize their operations, they must prioritize data security to protect themselves and their customers from cyber threats.
Related Articles
- Foxconn Confirms Ransomware Attack Disrupted Operations at Mexico Factory
- FBI Seizes Notorious Marketplace for Selling Millions of Stolen SSNs
About the Authors
- Annie Njanja: Reporter, Africa. Annie covers startups and tech news in Africa for TechCrunch.
- Carly Page: Sr. Reporter, Cybersecurity. Carly covers the cybersecurity beat at TechCrunch.
Follow Us on Social Media
Stay up-to-date with the latest tech news by following us on social media:
- Twitter: @TechCrunch
- LinkedIn: TechCrunch
- Facebook: TechCrunch
Subscribe to Our Newsletters
Get the best of TechCrunch’s coverage delivered straight to your inbox by subscribing to our newsletters:
- TechCrunch Daily News: Every weekday and Sunday, you can get the latest news in tech.
- TechCrunch AI: Get the latest news on the fast-moving field of artificial intelligence.
- Startups Weekly: Stay up-to-date with the best coverage of startups and entrepreneurship.
Contact Us
For tips or to reach out to us securely, contact Annie Njanja at annie.techcrunch@gmail.com or Carly Page at carly.page@techcrunch.com.
