Garmin South Africa Hack
Published On 15 Feb 2022
Enovise
Summary
Customer data was stolen from the Garmin South Africa online shop, including payment card details, names, addresses, phone numbers, and email addresses — exposing all details necessary for fraudulent purchases.
Analysis
Compromised Data
Customer information from the Garmin South Africa online shop was stolen, including payment card details, names, addresses, phone numbers, and email addresses. According to Garmin SA's managing director Jennifer van Niekerk: "We recently discovered the theft of customer data from orders placed through garmin.com/en-ZA."
The breach exposed all details necessary for fraudulent purchases, prompting the company to recommend customers monitor their payment records for unauthorised activity.
Response and Apology
Garmin advised affected users to contact their financial institutions if they suspect fraudulent transactions. The company stated it takes "our obligation to safeguard personal data very seriously" while apologising for the incident. When contacted regarding how the compromise occurred and what security improvements were implemented, Garmin did not provide an immediate response.
Related Resources
View Resources
Kenya Threat Landscape Report 2024
Sector-specific threat analysis for Kenya — public administration, finance, and information sectors account for over 43% of observed incidents. Developed in collaboration with SOCRadar.
Enovise Group and SOCRadar Partnership
Enovise joins forces with SOCRadar to deliver advanced Extended Threat Intelligence and Managed Detection & Response capabilities across Africa.