← Back to timeline

Ster-Kinekor

SourceHave I Been Pwned
StatusConfirmed breach
AddedMarch 13, 2017
OccurredMarch 9, 2017
Accounts affected1,619,544
Domainsterkinekor.co.za
All Ster-Kinekor breaches →
What was exposed
Dates of birthEmail addressesGendersNamesPasswordsPhone numbersPhysical addressesSpoken languages
What to do if you were affected
Worried your data is exposed?Take back control of your personal data with Literal.
Protect your data
Details
In 2016, the South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website. Whilst more than 6 million accounts were leaked by the flaw, the exposed data only contained 1.6 million unique email addresses. The data also included extensive personal information such as names, addresses, birthdates, genders and plain text passwords.
Frequently asked questions

What is the Ster-Kinekor data breach?

In 2016, the South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website. Whilst more than 6 million accounts were leaked by the flaw, the exposed...

When did the data breach happen?

This data breach occurred around March 2017.

How many accounts were affected?

Around 1,619,544 accounts were affected.

What information was exposed?

Exposed data included Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses and Spoken languages.

What should I do if I was affected?

Change your password for this account, and anywhere you reused it. Turn on two-factor authentication. Expect more phishing and spam at this address. Treat messages that reference this company with extra caution. Watch for text-message phishing and SIM-swap attempts on your phone number. Be wary of targeted scams that use your personal details to sound convincing.

View the original record on Have I Been Pwned ↗
Related breaches