1) The Department of Justice and Constitutional Development informed the Information Regulator as soon as it was confirmed that the Department has been affected by a ransomware attack.
2) The Department fully co-operated with the Information Regulator in terms of information sharing, guidance and their participation in the system restoration process.
3) As at 1 December 2021, the analysis and/or forensic investigation is still inconclusive in terms of the exact nature of the information that was sent outside of the Department as part of the breach. This information should present itself as part of the forensic investigation as expected to be conducted from the case that was opened with the South African Police Service. Therefore, the Information Regulator will be informed as soon as the information becomes available.