N4ughtySec claims to have stolen over R175 million from the South African Social Security Agency (SASSA) by exploiting credit bureau vulnerabilities and creating 100,000 fraudulent bank accounts.
They threaten to release SASSA’s data unless they receive an apology, amid investigations revealing significant identity fraud linked to recent SRD grant applications. The group said they extracted the funds by creating over 100,000 new bank accounts, which they achieved by breaching credit bureau XDS, as well as further exploiting TransUnion and Experian.