Garmin South Africa Hack
enovise.com
Published On 15 Feb 2022
Enovise
Summary
Customer data for purchases made through the Garmin South Africa shop has been stolen — including payment card numbers, CVV codes, names, physical addresses, phone numbers, and email addresses — containing all the information required to make fraudulent purchases.
Customer data for purchases made through the Garmin South Africa shop has been stolen, according to a notice sent to affected users by the company. "We recently discovered the theft of customer data from orders placed through garmin.com/en-ZA (operated by Garmin South Africa) that compromised your personal data related to an order that you placed through the website," Garmin SA managing director Jennifer van Niekerk told customers.
Compromised Data
The compromised data was limited to only Garmin's South Africa site, and contained the following information:
• Payment card number • Payment card expiration date • Payment card CVV number • First name and last name • Physical address • Phone number • Email address
The stolen data is extensive, and contains all the information required to make purchases with the victims' credit cards. "We recommend that you review and monitor your payment card records to make sure there were no unauthorised purchases," van Niekerk said.
Security and Apology
Van Niekerk told affected users that they should contact their bank or payment card provider for direction if they suspect that criminals have used these stolen details to make fraudulent payments.
"As a valued customer, we apologise for this incident and assure you that Garmin takes our obligation to safeguard personal data very seriously," she told customers.
MyBroadband asked Garmin how this information was compromised and what it has done to improve its security following the theft, but the company did not immediately respond to requests for comment.
You May Also Like
View Blogs
Kenya Threat Landscape Report 2024
The Kenya Threat Landscape Report, prepared by SOCRadar and Enovise, highlights various aspects of the cyber threat environment around Kenya — where public administration, information, and finance sectors collectively account for over 43% of observed incidents.
Enovise Group and SOCRadar Partnership
Enovise has partnered with SOCRadar to deliver advanced, proactive cybersecurity solutions for organisations across Africa, integrating SOCRadar's Extended Threat Intelligence platform with Enovise's Managed Detection and Response services.
Hackers Stole and Encrypted Data of 5 US Law Firms
Hackers compromised five United States law firms and demanded two 100 Bitcoin ransoms from each firm — one to restore access to the data, one to delete their copy instead of selling it. The Maze group published part of the stolen data, threatening to release increasingly sensitive material unless paid.
Hackers Tricked 3 British Private Equity Firms
In a highly targeted business email compromise attack, the Florentine Banker group tricked three British private equity firms into wiring $1.3 million — approximately $700,000 permanently lost — using man-in-the-middle tactics and lookalike domains to intercept and manipulate financial communications.