eTenders.gov.za: 65,000 user records leaked on DarkForums

Overview

On August 25, 2024, DarkForums user Knox, a Supreme Leader-ranked member, shared the database of eTenders.gov.za, the South African government tendering platform. The post states the breach exposed 65,000 user records through an IDOR vulnerability, and credits the leak to IntelBroker and EnergyWeaponUser.

What was published

The sample records include:

• Company names and types
• Regions and contact persons
• Contact numbers and email addresses
• User IDs

Sample rows show South African businesses registered on the tendering platform, including Fasset, Black Earth Communications and others.

Risks for affected individuals

South African companies and their staff registered on eTenders could face targeted phishing using their business contact details. Company registration data can also be used to impersonate firms in tender-related fraud.

What remains unknown

• The South African government has not publicly commented
• The full dataset was not visible in the thread
• The exact scope of the IDOR exposure is not confirmed

What affected people should do

South African businesses registered on eTenders should be cautious of unsolicited messages referencing their tender accounts and verify any contact through official channels. Monitoring for fraudulent use of company registration data is recommended.