CIPC securing accounts after major hack – what you need to know

South Africa’s Companies and Intellectual Property Commission (CIPC) is adopting a new customer verification process as part of its damage control after having its systems hacked.

The group – an agency inside the Department of Trade, Industry, and Competition where companies, co-operatives, and intellectual property are registered – reported having its systems compromised last week, where personal information of its clients and employees were exposed.

While CIPC claims that the breach was contained and curtailed, the alleged hackers told MyBroadband that this is not the case: they still have access to parts of the system, and information is still exposed.

They added that the security vulnerability that was exploited has existed since at least 2021. CIPC did not comment on the claims.

• Read what the CIPC hackers had to say here.

Regardless, CIPC urged clients to be vigilant in the monitoring of credit card transactions and to only approve/authorise known and valid transaction requests.

“The extent of the exposure is being investigated and will be communicated as soon as possible,” it said.

In the latest update, the group said that, in line with securing customer accounts, it has implemented a new customer verification process for SA ID holders as well as Foreign Passport holders.

The process will be as follows:

A. Clients with a South African ID number

1. Customers will log in using existing credentials on existing platforms.
2. Upon login, customers will be presented with a verification page. Customers must:

• Provide all necessary information which is mandatory.

3. Once all provided information is verified, a password reset page will be presented, and they will be required to update their password.

•  Follow the instructions for “password minimum requirements”
•  In instances where customers need to update their contact details, follow “update contact details process”

4. When customers input the new password and confirm new password, click on update.
5. An email link will be sent to the email address as listed by the customer, for verification.
6. Click the link to verify.
7. On successful verification, clients will now be able to log in.

B. Foreign Nationals – (passport numbers)

1. Customers will log in using existing credentials on existing platforms.
2. Upon login, customers will be presented with a verification page. Customers must:

•  Provide all necessary information, which is mandatory and click verify.
•  Follow the instructions for “password minimum requirements”
•  In instances where customers need to update their contact details, follow “update contact details  process”
• Once all provided information is verified and successful, a password reset page will be provided to update the password

3. If there is no record of passport details on CIPC’s database, customers will be provided with a link to update passport details on the Foreigner Assurance process.
4. Once approved, they will be able to return after 48 hours and then follow Step 2 above.
5. An email link will be sent to the email address as listed by the customer, for verification.
6. Click the link to verify.
7. On successful verification, clients will now be able to log in.

Read: Big change for businesses in South Africa hitting soon – what you need to know