If you received an SMS from Virgin Active saying they have been victim of a cyberattack, you aren’t alone. The Virgin Active gym group has announced that its systems have been compromised in a major cyberattack.
“Virgin Active South Africa became aware of a cyberattack yesterday and our security teams immediately started working with cybersecurity experts to carefully contain, manage and investigate the cyber event,” the company said in a notice posted on its website.
“While we take the necessary steps to protect data, we have been targeted by sophisticated cybercriminals. As a precautionary measure, we have taken all systems offline while we resolve this. Our clubs are operating as normal and we sincerely apologise for any inconvenience while we address this event.”
“There is currently no indication that any data has been removed from our systems. However, we urge all stakeholders to remain vigilant of any suspicious activity online.”
Virgin Active said it is working with law enforcement and has notified the Information Regulator “as a precaution”.
“The security of our systems and data is a top priority for us and we are doing everything we can to rectify the situation. We will provide any necessary further updates as soon as we are able to do so,” it said.
The company also addressed several FAQs about the attack for its customers, answered some of the most worrying questions:
What if my personal information has been compromised?
All our customer data is protected and, at this point in time, we are not aware of any data expropriation. As a precautionary measure, we have taken all systems offline while we work to resolve this.
How long will your systems be down?
We are unsure at this stage but will update you as soon as we have more information.
What information was compromised?
We are unsure as to the extent of the cyberattack. We have an ongoing investigation being done by forensic experts.
Is this a result of poor IT security?
Absolutely not. We have passed security audits and all our data is protected. In addition, all financial and banking data has been encrypted.