Vodacom Lack of Security Results in Bank Account Hack and Loss of over R100 000

<p>I would like to bring this to the attention of the public.</p> <p> </p> <p>An unauthorized sim-swap on a corporate account resulted in a loss of over R100 000 and Vodacome are not taking ANY responsibility. </p> <p> </p> <p>I make specific note that it is a corporate account because of the authentication that is needed to perform a corporate account sim-swap, yet it was performed without any of the protocols being followed because of hackers Vodacom says.</p> <p> </p> <p>Bringing this thievery to the attention of Vodacom we received a letter in return, where they deny any responsibility on their part.</p> <p> </p> <p>Below are some quotes from a letter we received from a Mr. MacPherson at Vodacom- he describes how a sim-swap should be authourised, admits to the knowledge that one of their consultants login details were hacked and used to access our information (as has been done in the past), yet they will still not take responsibility of this thievery.</p> <p> </p> <p>“…we wish to amplify that one of the ways in which a sim swap can be requested, is by way of a Vodacom store. In terms of a store request, the consultant will conduct a pre-determined, comprehensive authentication process to successfully identify the customer requesting the sim swap by requesting an identity document and written confirmation requesting the sim swap on the number in question..”</p> <p>I would like to point out that we did not go into the store and request a swap so we could not have been identified or given any written documentation to any Vodacom staff.</p> <p>“…the unique name and password of the relevant consultant was utilized to ********ly manipulate the system and circumvent security process to perform the sim swap. We have experienced multiple ways that ******** syndicates obtain and ********ly misuse unique username and passwords of consultants. Passed investigations have shown that methods such as “spyware” and “keyloggers” are being used effectively by syndicates/ ********* to ********ly obtain personal information”</p> <p>….okay, thank you for telling us you are aware at how these ********* did this but what is Vodacom doing to protect the customer/consumer? Are you upgrading your security systems? There is no reassurance and only passing of blame.</p> <p> </p> <p>And here is the cherry on top:</p> <p>“…we sincerely regret any loss that you may have suffered, Vodacom denies that it was the cause of any such loss.”</p> <p> </p> <p>So basically all Vodacom users beware as you could wake up one morning, like we did and be victims to having your bank accounts hacked and have Vodacom put up their hands saying they deny any responsibility even though their systems are at fault.</p>