WARNING REGARDING IMPLICATIONS OF SECURITY BREACH AT THE COMPANIES AND INTELLECTUAL
PROPERTY COMMISSION (CIPC)

ATTENTION: ALL SANRAL STAFF AND SUPPLIERS 14 March 2024

SANRAL has noted with concern and consequently issues this warning with regards to a criminal security breach at the Companies and Intellectual Property Commission (CIPC). The CIPC announced recently that it had experienced an unlawful security breach which had compromised the personal information of its employees and clients, including companies registered with the body.

This information, in the hands of the wrong people, can obviously be misused and abused.

The CIPC is an agency of the Department of Trade, Industry and Competition which holds the registration details of all South African companies, cooperatives and intellectual rights within a huge database that includes ID numbers, addresses and contact information, among other details.

In a statement, the CIPC warned that certain personal information of its clients and employees was unlawfully accessed and exposed. The CIPC urged its clients to be vigilant in the monitoring of credit card transactions and to ONLY approve/authorise known and valid transaction requests.

The CIPC also warned that there had been a major increase in cyber-attacks within South Africa and many other organisations had also been subject to such security breaches.
As soon as the breach became known, the CIPC proceeded to comply with all legislative and regulatory requirements in terms of the Protection of Personal Information Act, 4 of 2013, by notifying the Information Regulator, the South African Police Service (SAPS) and the State Security Agency (SSA).

While SANRAL itself has not been the subject of such a security breach, we appeal to all our staff and suppliers to be cautious when transacting and also when using technology. For instance, do not open any suspect attachments on emails or messages from people you do not know and, even from people you might know, because they may have been compromised.

It is important to carefully scrutinise any communications purportedly issued by or on behalf of SANRAL using the details of our Directors. In case of any doubt about the authenticity of such communications on behalf of SANRAL, do not hesitate to contact Information and Communication Technology (ICT) Services at Support@nra.co.za and/or notify Nthwana Ngoma on 062 264 1105 or
(012) 844 8083.

SANRAL will do everything in its power to ensure that our systems remain as impenetrable as possible.
At the same time we will continue to do what we do best – develop, build and maintain South Africa’s national roads network.

Reginald Demana
Chief Executive Officer