Netstar identified a cybersecurity incident involving unauthorised access to parts of our IT environment. Through ongoing monitoring and a forensic investigation, we became aware that some personal information was unfortunately accessed and published on a restricted-access part of the internet.  

We understand that this notice may cause concern, and we want to assure you that your privacy is a top priority for us. We are sharing this information in accordance with section 22 of the Protection of Personal Information Act, 2013 (POPIA), and to support you in taking any necessary steps to safeguard your personal information.

What happened 

On 23 June 2025, Netstar experienced a cybersecurity incident that temporarily disrupted certain operations. We immediately contained the incident and engaged external legal counsel and independent forensic cybersecurity experts to assess any potential risks to personal information. At the time, there was no evidence of any impact on customer data.

Subsequently, we identified data linked to Netstar had been published on a restricted-access site used by the threat actors.  As is common with incidents of this nature, we do not know the identities of those responsible for this malicious conduct.

We then conducted a secure download and forensic analysis of the data following best-practice protocols to determine its scope and sensitivity. This approach was taken to minimise the introduction of further risk and ensure that our communication to affected individuals is accurate and useful.

What information was involved

The personal information affected may vary, depending on your relationship with Netstar:

• Name and contact details
• Account or customer reference numbers
• Identity or company registration details
• Banking details contained in billing records or debit order instructions
• Vehicle details (such as registration number, make, and model)
• Physical and postal address
• We have already contacted anyone whose current  credit card details may have been accessed

For employees and former employees:

• Name, job title and work contact details
• In some cases, HR or payroll-related information held in routine business records.

For our vendors and business partners:

• Contact details
• Company registration documentation
• Identity documents of directors or authorised signatories
• Banking details contained in invoices or payment instructions.

It is important to note that not all the data categories listed above were impacted for every data subject. The exact data affected varies from person to person and may be more limited.

Possible consequences

Potential risks may include attempts such as phishing or social engineering, unauthorised debit order attempts, fraudulent account activity, identity fraud, or misuse of contact details. 

What we are doing

Following the breach, Netstar promptly contained the incident, notified the Information Regulator, and engaged independent forensic specialists to investigate the incident, monitor restricted-access sites, and analyse any data published by the threat actors. We have implemented additional security measures, including enhanced monitoring, network hardening, and strengthened access controls and data handling practices to reinforce the protections already in place and further safeguard your information.

What you can do to protect yourself

We encourage you to take the following steps to safeguard your information:

• Contact your bank to alert them that your details may have been exposed. Ask them to enable high‑risk transaction monitoring, daily limits, and ensure you have real‑time alerts (SMS/app notifications) enabled on your accounts. 
• Review your bank statements and app activity regularly. Report any suspicious transactions or unexpected debit orders to your bank immediately.  
• Be cautious of unsolicited emails, calls or messages asking for personal or banking information. Avoid clicking on suspicious links or opening unfamiliar attachments. 
• Use strong, unique passwords and enable multi‑factor authentication where available. 
• Consider registering for Protective Registration with the Southern African Fraud Prevention Service (SAFPS). It’s free and adds an extra layer of protection against identity fraud. You can sign up here. 

How to contact us

Your privacy and security remain our highest priority, and we are committed to supporting you through this process. If you have any questions or require assistance, please contact us by completing the contact request below.