19 August 2020 - Experian South Africa is continuing to investigate an isolated incident in South Africa involving a fraudulent data inquiry. Our investigations indicate that an individual in South Africa, purporting to represent a legitimate client, fraudulently requested services from Experian. The services involved the release of information which is provided in the ordinary course of business or which is publicly available. Experian South Africa's bureau infrastructure, systems and database have not been compromised, and there was no breach of Experian South Africa's systems.
We can furthermore confirm that no consumer credit or consumer financial information was obtained. Our investigations do not indicate that any misappropriated data has been used for fraudulent purposes. Our investigations also show that the suspect had intended to use the data to create marketing leads to offer insurance and credit-related services.
We have identified the suspect and confirm that Experian South Africa was successful in obtaining and executing an Anton Piller order which resulted in the individual's hardware being impounded and the misappropriated data being secured and deleted. We are continuing the legal process in this regard, including coordination with law enforcement and relevant authorities.
Upon discovering the incident, Experian South Africa notified the National Credit Regulator and the Information Regulator of the incident.