Old Mutual client data exposed in service provider error

Some of Old Mutual’s clients have had their mobile data and email addresses exposed through an error in a service provider’s systems. 

The financial service provider sent messages to some clients as a precaution noting, “At this stage, there is no indication of any unauthorised use of this information. Your policy, benefits and accounts remain secure and unaffected.”

It warned clients not to share PIN, password, or one-time passwords.

In a statement, it said, “Old Mutual can confirm that an incident involving one of its service providers may have resulted in certain customers’ personal information potentially being affected.”

ADVERTISEMENT

CONTINUE READING BELOW

“Importantly, this was not a cyberattack. The incident resulted from a configuration error within the service provider’s systems, which meant that certain files may have been accessible without the intended security controls.

“There is no evidence of hacking, malware, unauthorised system intrusion or attempts to bypass security measures.”

Read:
EasyEquities, Satrix hit by data breach
Popia enforcement gains teeth, but a critical loophole remains

“The personal information involved was limited to certain data fields, comprising either a mobile number, an email address, or a combination of both. Some records contained only free-text responses and did not contain personal information relating to identifiable individuals.

ADVERTISEMENT:

CONTINUE READING BELOW

There is no evidence that the information was accessed by unauthorised parties or misused”. The issue has been resolved, and steps have been taken to strengthen safeguards against a recurrence.

In line with our obligations under the Protection of Personal Information Act, we proactively notified potentially affected customers as a precautionary measure. 

Old Mutual takes the protection of customers’ personal information seriously and sincerely regrets any concern this incident may have caused.

#Mutual #client #data #exposed #service #provider #error