24 February 2021
Dear rain customer,
Recently our cyber-security team discovered unauthorised access to our invoice storage system. The vulnerability has been identified and remedied. This means that some of your historical invoices may have been accessed, with the information limited to your name and postal address.
Firstly, we want to assure you that your sensitive information is secure, and no action is required from you at all.
We can confirm that there has been NO unauthorised access to any systems that store information such as login details, ID numbers, banking or card details. This information was never at risk.
To protect our customers, rain does not directly store any payment-related information. This sensitive data is stored off-site with an independent specialist partner, utilising bank-level security.
We would like to assure you that our rigorous security measures were successful in ensuring that further sensitive information remains secure and private.
Cyber-crime is a criminal offence and rain is working with the relevant authorities to investigate the matter.
If you have any questions about the incident, please contact our cyber-security team at
cybersecurity@rain.co.za
Thanks,
rain
