South Africa's Bob Shop breached; card numbers and decryption keys copied
The database of South African online marketplace Bob Shop was breached, and an attacker copied both historical payment card numbers and the encryption keys needed to decrypt them. Cardholder names and expiry dates were also exposed, and the company is treating the card numbers as compromised. Access to customer and seller account information was also confirmed to have been possible, and the company is investigating whether such access occurred.
Key facts
- Affected organisation
- Bob Shop
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Historical payment card numbers, cardholder names, expiry dates and encryption keys exposed
- Cause / method
- Database breach allowed encrypted card numbers and their decryption keys to be copied together
- Location
- South Africa
If your data was exposed
Exposed dataNameCard details
- Don’t tap links in texts, calls or emails that mention this incident and offer compensation, refunds or breach checks. Check directly on the organisation’s official website or app.
- Turn on payment alerts in your card issuer’s app, and if you see a charge you don’t recognise, ask the issuer to block and reissue the card.
Timeline
- The company disclosed that card numbers and encryption keys had been copied and investigated possible access to customer and seller account information.
2 related reports
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.