Category: Configuration

Home » Configuration

Incident: 60GB of User Data Was Exposed by Australian Trading Company ACY Securities | Heimdal Security

by Steven Kirby | Jun 6, 2022 | Australia, Australian InfoSec Incidents 2022, Banking and Finance, Confidentiality, Configuration, Data Breach, In the Press, Privacy Breach | 0 |

Australian Data Beach June 2022: 60GB of User Data Was Exposed by Australian Trading Company ACY Securities. A Representative declared that the Exposed Server Was an “Insignificant One”

Incident: Pauline Hanson’s website redirected to refugee council site | SBS News

by Steven Kirby | Jan 15, 2021 | Australia, Australian InfoSec Incidents 2021, Availability, Configuration, Politician and Politics, SBS News, Website | 0 |

Australian Politician DNS Redirect January 2021. Pauline Hanson’s website redirected to refugee council site. Ms Hanson’s mistake of allowing her DNS registration to lapse has complicated fixing the link

Incident: Orchard worker recruiter exposed sensitive personal data | iTnews

by Steven Kirby | Oct 29, 2020 | Australian InfoSec Incidents 2020, Confidentiality, Configuration, Control of operational software, Data Breach, Human Resources, iTnews, Privacy, Victoria | 0 |

Australian Workers Data Exposed October 2020. Orchard Tech a Melbourne company recruiting horticultural workers exposed sensitive personal data. AWS Simple Storage Service (S3) instance containing thousands of sensitive personal documents left open for anyone to access for over a month.

Incident: Misconfigured UTAS SharePoint site exposed 20,000 students’ details | iTnews

by Steven Kirby | Sep 21, 2020 | 09 Access Control, Australian InfoSec Incidents 2020, Confidentiality, Configuration, Education and Training, iTnews, Privacy Breach, Tasmania | 0 |

Australian Privacy Exposure September 2020: Misconfigured UTAS SharePoint site exposed 20,000 students’ details. Security settings allowed broad access to files.

Incident: Data breach exposes tens of thousands of NSW driver’s licences online | ABC News (Australia)

by Steven Kirby | Sep 1, 2020 | 09 Access Control, ABC News (Australia), Australian InfoSec Incidents 2020, Confidentiality, Configuration, Education and Training, New South Wales, Privacy Breach, State Government | 0 |

Australian Government Privacy Breach September 2020: Data breach exposes tens of thousands of NSW driver’s licences online. The documents feature scans of licences which reveal information such as names and addresses.

NZ Incident: Data breach after lax New Zealand Transport Agency (NZTA) security | Stuff.co.nz

by Steven Kirby | Sep 9, 2019 | API Security, Configuration, Data Breach, 🥝 NZ Incidents, Federal Government, New Zealand, Stuff.co.nz | 0 |

Privacy Breach 09 September 2019: The NZ Transport Agency admits to a technology botch up leaving what was meant to be a highly secure data key wide open.

Incident: TGI Fridays Delivers Customer Indigestion Over Data Exposure | Threatpost

by Steven Kirby | Aug 29, 2019 | Australia, Australian InfoSec Incidents 2019, Configuration, Data Breach, Privacy Breach, Retail, Threatpost | 0 |

August 29 2019 Australian Privacy Breach: TGI Fridays Australia restaurant chain warns loyalty reward program member of exposed data incident – Unsecured S3 bucket.

Incident: Auckland’s Rosehill College deletes pupils’ personal data from their own laptops | Stuff.co.NZ

by Steven Kirby | Aug 8, 2019 | Configuration, Data Loss, Education and Training, New Zealand, Stuff.co.nz | 0 |

NZ Cyber Incident August 08 2019: Rosehill College Auckland which requires pupils to buy their own digital devices has come under fire after all data was deleted from students’ laptops during a school-mandated software update.

Incident: Sydney headquartered MEGT data breach exposed students passport details, education data | Computerworld

by Steven Kirby | Jun 27, 2019 | Australian InfoSec Incidents 2019, Computerworld Australia, Configuration, Data Breach, Education and Training, New South Wales, Privacy Breach | 0 |

Data Breach 27th June 2019 – Data from a student management system was exposed by an open S3 bucket, an Australian training company MEGT has confirmed.

Incident: Fisheries Qld blames bad update for password ‘fault’ | iTnews

by Steven Kirby | Jan 14, 2019 | Australian InfoSec Incident, Australian InfoSec Incidents 2019, Configuration, Government Agency, iTnews, Queensland, State Government | 0 |

Fisheries Queensland has blamed a software bug introduced via an update for an incident that left users of its Fishnet Secure portal exposed over the break.

Incident: Vic Building Authority exposes MongoDB instance | iTnews

by Steven Kirby | Dec 24, 2018 | Australian InfoSec Incident, Australian InfoSec Incidents 2018, Building and Construction, Configuration, Data Breach, iTnews, Regulator and Authority, State Government, Victoria | 0 |

Australian Information Security Incident Reported: December 24 2018 The Victorian Building...

Incident: Australian BPO firm Onehalf leaves data exposed on GitHub | iTWire

by Steven Kirby | Aug 30, 2018 | APP Australian Privacy Principles, Australia, Australian InfoSec Incident, Australian InfoSec Incidents 2018, Configuration, Data Breach, iTWire, Privacy Breach, Services | 0 |

Australian Information Security Incident Reported: August 30 2018 Australian business process...

Incident: Telstra user stumbles across ‘private’ details of 66,000 users | 9 News

by Steven Kirby | Jul 27, 2018 | 9 News, APP Australian Privacy Principles, Australia, Australian InfoSec Incident, Australian InfoSec Incidents 2018, Configuration, Data Breach, Privacy, Telcommunications and Internet Service Provider, Website Compromise | 0 |

Australian Information Security Incident Reported: July 27 2018 Telstra customer stumbles across...

Home » Configuration

More Australian News

Audit: Australian Senate Estimates reveal 435 Chinese-made surveillance devices found at defence sites
by Steven Kirby on June 4, 2023
Defence Internal Audit Finding 31 May 2023 Australian Senate questioning reveal 435 Chinese-made surveillance devices found at defence sites Defence …
Steven Kirby on LinkedIn: The Essential Eight Cyber Security Guidelines | Microsoft
by Steven Kirby on June 4, 2023
https://lnkd.in/gZAjz-vm
Nivedita Newar on LinkedIn: Mandatory Cyber Incident Reporting Obligation
by Nivedita Newar on June 4, 2023
Awareness Refresher: If you are a cyber security team member in any role working for any of the 13 critical infrastructure sectors under the SOCI Act…
The Essential Eight Cyber Security Guidelines | Microsoft
by Microsoft on June 4, 2023
The Essential Eight cyber security guidelines for business Malicious cyber activity is increasing in frequency, scale, and sophistication throughout …
Breaking Down the Security of Critical Infrastructure Act
by Wouter Veugelen on June 2, 2023
On 17 February 2023, the Critical Infrastructure Risk Management Program (CIRMP) requirements came into effect. The clock is now ticking for more …
An interview with Gilbert Tobin discussing artificial intelligence in Australia
by Gilbert + Tobin on June 2, 2023
...will apply in respect of any personal information or sensitive information (as defined in the Privacy Act) that is ingested in or used by an AI …
Death and digital assets - Decoding digital assets in estate administration
by Ilana Kacev on June 2, 2023
The ever-evolving digital landscape has changed the concept of what an asset is, beyond that of mere physical possessions to now including numerous …
Regulatory focus on combatting scams and strengthening cyber resilience continues
by Kate Hilder on June 2, 2023
We outline the latest announcements from APRA and ASIC As previously reported, following a record year for consumer scam losses, regulators, have …
Services Australia sharing password-crackers with Dept of Education
by Jeremy Nadel on June 2, 2023
Services Australia has provided smartphone-hacking technology to the Department of Education and other unnamed agencies to assist them in …
Toyota does U-turn, confirms thousands of Australian customers hit by latest data breach
on June 1, 2023
A fortnight after its most recent customer data breach in Japan, Toyota Australia has confirmed the details of almost 3000 local owners were exposed …

Weekly Australian News and Monthly Incident Review Emails

No advertisements, marketing, sales, or unsolicited emails. Your email address is ONLY used to send the publications listed above.

Featured

Incident: Thousands of identifiable Northern Territory patient health files sent to overseas-based software vendor in government data breach | ABC News (Australia)

Featured

Incident: Drug and alcohol tests of graduate paramedics revealed in Ambulance Victoria data breach | The Guardian

Featured

Audit: Australian Senate Estimates reveals 435 Chinese-made surveillance devices found at defence sites

Featured

Audit: Western Australia Auditor General's Local Government Information Security Audit 2021-22 reports 324 control weaknesses

Featured

Quote: Elijah Shaw "In the battle of real world vs..."

Featured

Quote: Kirsten Manthorne "You are an essential ingredient in our ongoing effort to reduce Security Risk.”

Category: Configuration

More Australian News

Weekly Australian News and Monthly Incident Review Emails