Ster-Kinekor
Disclosed Mar 13, 20179 years ago1,619,544 accountsUnverified
In 2016, the South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website. Whilst more than 6 million accounts were leaked by the flaw, the exposed data only contained 1.6 million unique email addresses. The data also included extensive personal information such as names, addresses, birthdates, genders and plain text passwords.
What is known
| People affected | 1,619,544 (accounts in the leaked data, per Have I Been Pwned) |
|---|---|
| Disclosed | Mar 13, 2017 |
| Happened | Mar 9, 2017 |
| Attack | Not stated |
| Data exposed | Dates of birth, Emails, Names, Passwords, Phone numbers, Addresses |
| Sector | Tech |
| Status | Unverified: not yet confirmed by an official notice, a filing or the organization |
| Check your email | Have I Been Pwned |
Sources
| Source | |
|---|---|
| Have I Been Pwned: Ster-Kinekorhaveibeenpwned.com · Aggregator | Aggregator |
Notices filed
| Where | Filed | People |
|---|---|---|
| Have I Been Pwnedaccounts in the data | Mar 13, 2017 | 1,619,544 |
History of this record
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.