South Africa: Hackers Steal Over 450,000 Job Applicants’ Files in Stats SA Breach

Statistics South Africa has been hit by a ransomware attack, with hackers claiming to have stolen over 450,000 HR files from its e-recruitment system. The XP95 group is demanding a ransom, raising concerns about identity theft and the security of personal data.

Statistics South Africa (Stats SA) has suffered a major ransomware attack, with hackers claiming to have stolen over 450,000 files, primarily from the agency’s human resources database used for job applications. Statistician-General Risenga Maluleke confirmed the breach involved HR records submitted via the e-recruitment platform, raising concerns about potential identity theft and the security of personal information.
The XP95 ransomware group has claimed responsibility and is demanding a ransom, setting a deadline of April 20. Maluleke noted the attack may have exploited vulnerabilities from applicants accessing the system via unsecured devices, such as phones or public internet cafes. Stats SA said it is working with authorities and will notify the information regulator as investigations continue.
Statistics South Africa, the country’s official data agency, produces key demographic, economic, and social statistics used for policy and planning. This attack adds to a string of ransomware incidents targeting South African government-linked institutions. Recent cases include a cyberattack on the South African Reserve Bank in August 2022, a ransomware breach of the Department of Justice and Constitutional Development in September 2021 compromising 1,200 personal files, and a July 2021 attack on state-owned logistics company Transnet that disrupted ports and rail systems nationwide, though without compromising customer data.