Sensitive Customer Data Breached by Trojan Malware Downloaded by Employee

2019, Breaches, February

Who: Eskom

# of Records: Unknown

Date: 7 February 2019

What Happened: An Eskom employee downloaded a trojan onto her computer.

How it Happened: A vulnerability in Eskom’s information systems that are​ leaking customer data.

Outcome: According to the researcher, the employee downloaded a fake Sims 4 installer – which resulted in her company credentials being compromised. Eskom did not confirm the details of the infection but later thanked the hacker on Twitter, stating that the issue had been investigated and the necessary action taken.