CARTRACK DATA BREACH – SERIOUS CONCERNS ABOUT CUSTOMER DATA SECURITY

I am extremely disappointed and concerned by Cartrack’s handling of a serious cybersecurity incident involving its customer information. Cartrack recently notified me that on 26 August 2026 it experienced a ransomware attack. More concerningly, Cartrack has confirmed that information accessed during the incident was subsequently published on the dark web on 8 September 2026.

According to the notification I received, the information that may have been affected includes my personal contact details, physical address, bank account information and vehicle/driving-related information.

What concerns me most is that I am still being told that the investigation is ongoing and that the information “may include some or all” of these categories. As a customer, I want to know specifically what of my personal information was accessed, what was exfiltrated, and whether my individual information was among the data published on the dark web.

This is not simply an email address being exposed. The information potentially involved includes banking details, residential information and vehicle-related data, which creates legitimate concerns around identity theft, financial *****, impersonation and targeted ****s. Cartrack itself acknowledges these risks in its notification to customers.

I have formally contacted Cartrack’s Information Officer and requested detailed information regarding: • Exactly what personal information of mine was compromised • Whether my banking information was accessed • Whether my vehicle/location or tracking information was accessed • Whether my information was published on the dark web • What security safeguards were in place at the time of the breach • What Cartrack is doing to protect affected customers • What remediation or support will be provided to customers affected by this breach I have also formally requested cancellation of my Cartrack services because this incident has materially affected my confidence in the company’s ability to protect my personal information.

I believe customers deserve transparency, accountability and meaningful protection, rather than simply being advised to monitor their bank accounts and be cautious of ****s.

I am now awaiting a substantive response from Cartrack and reserve my rights to escalate the matter to the Information Regulator of South Africa and to seek independent legal advice regarding any loss or harm arising from the compromise of my personal information. Cartrack needs to provide its customers with clear answers about what happened, what information was compromised and, most importantly, what it is doing to protect us now.