LR
Lee R

1 reviews | Active since Mar 2009

29 Mar 2022, 22:38

************* firm in possession of millions of people's sensitive personal data

My data held by Transunion was breached, along with that of millions of their other customers, on an unclear date in early 2022. On 27 March 2022 - after fending off a week's worth of calls from probable ********** - I eventually received notification of this from the company, together with a voucher to access their so-called TrueIdentity product for free. Unfortunately their dysfunctional website would not allow this and their call centre was so overloaded that it was only late in the afternoon of 28 March that I managed to speak to a consultant. Escalating from consultant to consultant to team leader eventually - apparently - meant that the product was loaded onto my profile, but it did not show up on my dashboard. At my request, team leader Glen Pillay emailed me confirmation that it had been loaded and would be valid until July 2023 (previous consultants having indicated it would be valid for only 12 months). As an ethicist and a health practitioner who works with numerous vulnerable and financially stressed individuals I have concerns about the societal impact of the breach and thus asked Glen Pillay how Transunion has responded to the Information Regulator's requirements that it announce it on radio stations (in all official languages), in newspapers and on social media, He pointed me to a solitary piece of 'evidence', namely an article published on IT Web by Admire Moyo - who I note clearly wrote this at his own initiative. Perhaps because I repeated my query on email - sending a copy to Lee Naik, Transunion CEO - I was then told that the Communications Team would come back to me with a response during the course of today. It is now 10.30pm and no response has been forthcoming. Transunion's trust index rating of 2.4/10 is clearly warranted - indeed, even that rating seems too high. This is just not good enough, for a financial services company which holds sensitive personal data on millions of people in South Africa. I will watch with interest to see if this post gets a reply.

0
Replies (0)