What was exposed, when it happened, and which databases confirm it.
- accounts
- 81,830
- Breached
- September 7, 2016
- Last Update
- September 15, 2016
Were you caught in this breach?
Search your email, phone number or username against every record CheckLeaked indexes.
Your address never leaves this page: it is hashed in your browser and only a short fragment of that hash is sent.
What happened
In September 2016, the new eThekwini eServices website in South Africa was launched with a number of security holes that lead to the leak of over 98k residents' personal information and utility bills across 82k unique email addresses. Emails were sent prior to launch containing passwords in plain text and the site allowed anyone to download utility bills without sufficient authentication. Various methods of customer data enumeration was possible and phishing attacks began appearing the day after launch.
Compromised Info
- Dates of birth
- Deceased date
- Email addresses
- Genders
- Government issued IDs
- Names
- Passport numbers
- Passwords
- Phone numbers
- Physical addresses
- Utility bills
Attestation
Four independent databases catalog this breach and they do not always agree. Each lane below is one source’s own count.
Sources & Link Methods
- HIBP
FAQ
What was leaked in the eThekwiniMunicipality breach?
The eThekwiniMunicipality breach exposed: Dates of birth, Deceased date, Email addresses, Genders, Government issued IDs, Names, Passport numbers, Passwords, Phone numbers, Physical addresses, and Utility bills.
When did the eThekwiniMunicipality breach happen?
The eThekwiniMunicipality breach was disclosed on September 7, 2016 and affected 81,830 records.
Am I affected by the eThekwiniMunicipality breach?
Search your email, phone or username at checkleaked.cc to find out whether your data appears in the eThekwiniMunicipality leak.