Security compromise of the CIPC- Business Continuity

Many of you might have read in the media, that the CIPC experienced a security breach.

Without detracting from the seriousness of such incident, it’s important to mention that the CIPC is not the only organization that has been subjected to such a breach, and there has been a massive increase of cyber-attacks within South Africa and it would seem that as a jurisdiction, we are being targeted.

Breaching the security infrastructure of any organization, institution or agency is nothing more than a criminal act and the perpetrators are criminals that should be portrayed as such. As a result of the criminal nature of the unlawful and mala fide breach of the CIPC security systems and protocols, the necessary steps will be taken to ensure that the guilty are held responsible for the crimes committed.

As soon as the breach became known, the CIPC proceeded to comply with all requirements in terms of the Protection of Personal Information Act, 4 of 2013, by notifying the Information Regulator, the South African Police Service and the State Security Agency of the security compromise and publishing a media statement to that effect. Every reasonable steps are being taken to ensure that the CIPC systems and platforms are protected from unlawful and//or unauthorized access and abuse, and remain available to our clients for transacting.

We will continue to transact and service our clients with efficiency in all areas of our core mandate as we have been and are currently doing. The CIPC has always been aware of the possibility of attacks against its databases and over the years have invested significantly in the best technology to secure the data kept on our registers, despite having the legal obligation to disclose same.

The recent events have necessitated the CIPC to remind our clients of the content of section 187(4)(c) of the Companies Act, 71 of 2008, which states: –

“(4) The Commission must-
(c) make the information in those registers efficiently and effectively available to the public, and to other organs of state;

In terms of our governing legislation, the information contained on the CIPC registers form part of the public domain and can be accessed by any person when the legal and lawful processes are followed.

Due to the increased regulatory compliance frameworks within South Africa brought about by the General Laws Amendment Act, 22 of 2022, criminals are feeling the pressure and as one of the Regulators tasked with enforcing compliance to the legislation, the CIPC is not immune to levels of criminality levelled against it.

The resultant effect is heightened awareness of security (especially cyber security) risks and greater vigilance in terms of the protection of the data the CIPC is custodian of.

CIPC has been and continue to deploy additional security and verification layers on all our transactional platforms, and our clients are urged to update and amend all passwords and login information, as an added security measure.

The Commission, established by the Companies Act, 71 of 2008, will perform its functions, without fear, favour or prejudice and will continue to fulfill its obligations and objectives, even in the face of Criminal adversity.

Notice 20 of 2024 

New customer verification process

In line with securing customer accounts, CIPC has implemented a new customer verification process for SA ID holders as well as Foreign Passport holders.

The process will be as follows:
A. Clients with a South African ID number

1. Customer will login using existing credentials on existing platforms.
2. Upon login, customer will be presented with a verification page. Customer must:

    • Provide all necessary information which is mandatory.

3. Once all provided information is verified, a password reset page will be presented, and you will be required to update your password.

    •  Follow the instruction for “password minimum requirements”
    •  In instances where you need to update your contact details (follow “update contact details process”)

4. When you input the new password and confirm new password, click on update.
5. An email link will be sent to the email address as listed by the customer, for verification.
6. Click the link to verify.
7. On successful verification, clients will now be able to log in.

 

B. Foreign Nationals – (passport numbers)
1. Customer will login using existing credentials on existing platforms.
2. Upon login, customer will be presented with a verification page. Customer must:

    •  Provide all necessary information, which is mandatory and click verify.
    •  Follow the instruction for “password minimum requirements”
    •  In instances where you need to update your contact details (follow “update contact details  process”)
    •  Once all provided information is verified and successful, a password reset page will be provided to update your password

3. If there is no record of passport details on CIPC’s database, you will be provided with a link to update passport details on the Foreigner Assurance process.
4. Once approved, you will be able to return after 48 hours and then follow Step 2 above.
5. An email link will be sent to the email address as listed by the customer, for verification.
6. Click the link to verify.
7. On successful verification, clients will now be able to log in.

Should you have any issues, please contact the CIPC Contact Centre on 086 100 2472

Notice 18 of 2024

CIPC Closure to the Public for Easter Weekend

Taking into consideration that CIPC official office days are Mondays to Fridays and do not include weekends or public holidays, notice is hereby given in terms of and for purposes of the Acts mentioned in the Schedule below, that CIPC will be closed to the public from 12h00 on Thursday 28 March 2024 for the Easter week-end.

The CIPC Offices at –
a) the Department of Trade, Industry and Competition (the dtic) (77 Meintjies Street, Block F – Entfutfukweni) in Sunnyside, Pretoria;
b) 1st floor, Office 103, Sancardia Building, 541 Madiba Street, Arcadia, Pretoria;
c) Talis House, No 17 Simmonds street, Cnr Main and Simmonds street, Marshalltown, Johannesburg;
d) Norton Rose House No 8, Shop Number 3, Riebeek Street, Thibault Square, Cape Town; and
e) (CIPC officials) at Trade and Investment KwaZulu Natal (TIKZN) situated at 1 Arundel Close, Kingsmead Office
Park, Kingsmead Boulevard, Stalwart Simelane Street in Durban,

will re-open at 08h00 on Tuesday 2 April 2024 following Easter Monday 1 April 2024 (public holiday).

Please use Web Services: www.cipc.co.za, www.eservices.cipc.co.za and www.bizportal.gov.za.

SCHEDULE

Trade Marks Act, 1993
Patents Act, 1978
Design Act, 1993
Copyright Act, 1978
Companies Act, 2008
Close Corporations Act, 1984
Co-operatives Act, 2005
Registration of Copyright in Cinematograph Film Act, 1977

Notice 17 of 2024

Notification of security compromise as per section 22 of the Protection of Personal Information Act, 4 of 2013 (“POPIA”)

You are hereby notified that the CIPC noted an attempted security breach and the compromise of personal information of clients and CIPC employees, held on the CIPC records.

 Our ICT technicians were alerted, due to extensive firewall and data protection systems in place at the CIPC, to a possible security compromise and as a result, certain CIPC systems were shut down immediately to mitigate any possible damage.

Through the diligent efforts of the ICT and information security teams, the compromise was isolated and curtailed and the relevant systems are back up and available for processing.

Unfortunately, certain personal information of our clients and CIPC employees was unlawfully accessed and exposed. CIPC clients are urged to be vigilant in the monitoring of credit card transactions and ONLY approve/authorise known and valid transaction requests. The extent of the exposure is being investigated and will be communicated as soon as possible.

The CIPC recognises the importance of the consistent availability of our systems and the safeguarding of information that is not in the public domain, and is working actively to minimise the impact on the CIPC clients and employees.

We apologise for any inconvenience caused and assure you that every reasonable step is taken to ensure that all CIPC systems and platforms are safe and protected from unauthorised and/or unlawful access.

 

END

 

Enquiries:

Mr Lungile Dukwana

Chief Strategy Executive

Email: ldukwana@cipc.co.za

Mobile: 083 384 4252

Notification of security compromise

Invitation: 2024 MUT – WIPO South Africa summer school on intellectual property and transfer of technology

The Summer School programme provides an opportunity for senior students and young professionals to acquire deeper knowledge of each domain of intellectual property (IP) and of the role and functions of the World Intellectual Property Organization (WIPO).

The programme consists of lectures, case studies, simulation exercises and group discussions on selected IP topics, with an orientation towards the interface between intellectual property and other disciplines. It will be presented in a hybrid format.

The summer school is open to senior students (graduate and postgraduate) and young professionals from any field of study or discipline. The programme is designed for candidates who are already familiar with IP.

All applicants are required to have successfully completed the WIPO Distance Learning Course on Intellectual Property Management (DL 450) before being selected for the programme. Access to this online course will be made available upon registration to the summer school.

To apply:
https://welc.wipo.int/acc/index.jsf?page=wssCatalog.xhtml&lang=en&cc=WSSZA2024#plus_WSSZA2024

Submit a résumé together with a letter of motivation (maximum 300 words) setting out your reasons for applying and what you hope to gain from the summer school. A recent CV and identification document, such as a passport or national ID, must also be submitted.

For one time only, participation will be free of charge.

Registration is from 12 February 2024 to 31 May 2024. Selected applicants will be notified two weeks after the registration deadline.

A certificate of participation is awarded to participants who successfully complete the programme requirements

Invitation: WIPO Summer school