Personal Data Leak Monitor

eThekwini Municipality data breach

81.8K accounts from eThekwini Municipality (eservices.durban.gov.za) were exposed in this breach. Besides email addresses, it included government issued IDs, passport numbers and passwords, which makes it a high-risk breach.

Breach date
September 7, 2016
Accounts
81,830
Added to the database
September 15, 2016

Was your email address in this breach?

Check if your email has leaked

We display where your address leaked and what went with it. We never store the address.

We don't store your address. It is checked right here against about 1029 breaches, including this one.

What leaked

Dates of birthDeceased dateEmail addressesGendersGovernment issued IDsNamesPassport numbersPasswordsPhone numbersPhysical addressesUtility bills

What to do now

  1. Watch for accounts or mail opened in your name; contact the issuer
  2. Please change that password, and anywhere you reused it
  3. If your birthday is a PIN, kindly change it
  4. Do not tap links in emails claiming to be that service
  5. Expect scam emails that use your real name

Tools that help with this breach

Norton 360PaidVisit the official site →(opens in a new tab)Trend Micro SecurityPaidVisit the official site →(opens in a new tab)

About this breach

In September 2016, the new eThekwini eServices website in South Africa was launched with a number of security holes that lead to the leak of over 98k residents' personal information and utility bills across 82k unique email addresses. Emails were sent prior to launch containing passwords in plain text and the site allowed anyone to download utility bills without sufficient authentication. Various methods of customer data enumeration was possible and phishing attacks began appearing the day after launch.

Source: Have I Been Pwned (CC BY 4.0)

Similar breaches from the same period