Category: Confidentiality

Home » InfoSec Framework and Standards » CIA Impact » Confidentiality

Incident: Student details, photos exposed in University of WA data breach | iTnews

by Steven Kirby | Aug 1, 2022 | Australian InfoSec Incidents 2022, Confidentiality, Education and Training, iTnews, Privacy Breach, Western Australia | 0 |

Australian University Privacy Incident August 2022: Student details, photos exposed in University of Western Australia data breach. The privacy breach that may have compromised the information of hundreds of current and past student.

Incident: WA Arts and Culture Trust discloses potential data breach | CRN Australia

by Steven Kirby | Jul 25, 2022 | Australian InfoSec Incidents 2022, Confidentiality, CRN Australia, Entertainment and Events, Privacy Breach, SaaS - Software as a Service, Western Australia | 0 |

Australian Arts Privacy Breach July 2022: Western Australia Arts and Culture Trust discloses potential data breach in it SaaS digital marketing platform. The vendor WordFly revealed it has been offline since 10 Jul.

Audit: WA Auditor General tables the 2021 Financial Audit Results for Universities and TAFEs

by Steven Kirby | Jul 24, 2022 | 18.02.01 Independent review of information security, Australian Audit Report 2022, Availability, Compliance, Confidentiality, Integrity, State Government, Western Australia | 0 |

West Australian Audit Report July 2022: Western Australia Auditor General tables the 2021 Financial Audit Results for Universities and TAFEs. OAG identified 124 information systems control weaknesses, a 20% increase 2020, 67% of the weaknesses as rated as moderate.

Audit: Vic privacy watchdog uncovers third-party infosec risks at four agencies | iTnews

by Steven Kirby | Jul 22, 2022 | 18.02.01 Independent review of information security, Australian Audit Report 2022, Availability, Compliance, Confidentiality, Integrity, iTnews, State Government, Victoria | 0 |

Australian Audit Report July 2022: Victorian privacy watchdog uncovers third-party infosec risks at four agencies. Agencies only partially effective at ensuring that third parties are securing public sector information.

Incident: Deakin University reveals breach of 47,000 students’ details | iTnews

by Steven Kirby | Jul 13, 2022 | Australian InfoSec Incidents 2022, Confidentiality, Education and Training, iTnews, Password, Privacy Breach, SMiShing, Threat Vector, Victoria | 0 |

Australian Cyber Attack July 2022: Deakin University reveals privacy breach of 47,000 students’ details. Subset targeted with smish sent via officially-used SMS channel

Incident: Melbourne’s Port Phillip Prison jail targeted by anonymous hackers in cyber attack | MSN

by Steven Kirby | Jul 7, 2022 | Australian InfoSec Incidents 2022, Availability, Confidentiality, Hacked, Integrity, iTnews, MSN Australia, Police and Law Enforcement, Privacy Breach, State Government, Victoria | 0 |

Australian Jail Cyber Attack July 2022: Melbourne’s Port Phillip Prison jail targeted by anonymous hackers in cyber attack. Hackers take control of the G4S operated jail’s online network.

Audit: West Australian Local Government Information Systems Audit Report “a significant area of concern”

by Steven Kirby | Jun 22, 2022 | 18.02.01 Independent review of information security, Australian Audit Report 2022, Availability, Compliance, Confidentiality, Integrity, kirbyIDau News, Local Government, Western Australia | 0 |

Australian Audit Report June 2022: West Australian Local Government Information Systems Audit Report “a significant area of concern”. None of the 12 entities where we performed capability maturity assessments met benchmark.

Audit: Queensland Audit Office Education 2021 Report finds “all need to strengthen their security”

by Steven Kirby | Jun 16, 2022 | 18.02.01 Independent review of information security, Australian Audit Report 2022, Availability, Compliance, Confidentiality, Integrity, kirbyIDau News, Queensland, State Government | 0 |

Australian Audit Report June 2022: Queensland Audit Office Education 2021 Report finds “all need to strengthen their security”. Deficiencies identified with user and privilege access management, audit log and user activity monitoring.

Audit: Cyber basics still beyond fed gov as Essential Eight mandate looms | iTnews

by Steven Kirby | Jun 10, 2022 | 18.02.01 Independent review of information security, Australia, Australian Audit Report 2022, Availability, Compliance, Confidentiality, Federal Government, Integrity | 0 |

Australian National Audit Office Report June 2022: Cyber basics still beyond fed gov as Essential Eight mandate looms. Audit finds most controls “still significantly below” requirement.

Incident: 60GB of User Data Was Exposed by Australian Trading Company ACY Securities | Heimdal Security

by Steven Kirby | Jun 6, 2022 | Australia, Australian InfoSec Incidents 2022, Banking and Finance, Confidentiality, Configuration, Data Breach, In the Press, Privacy Breach | 0 |

Australian Data Beach June 2022: 60GB of User Data Was Exposed by Australian Trading Company ACY Securities. A Representative declared that the Exposed Server Was an “Insignificant One”

Incident: NSW public insurer icare privacy bungle hits 193,000 people | iTnews

by Steven Kirby | Jun 2, 2022 | Australian InfoSec Incidents 2022, Banking and Finance, Confidentiality, Data Handling, Email, Insider Threat, iTnews, Medical and Health Care, New South Wales, Privacy Breach | 0 |

Australian Insurer Privacy Breach June 2022: NSW public insurer icare sends private details of 193,000 workers to wrong employers. Excel spreadsheet emailed to 587 wrong employers and brokers

Incident: Australian National Disability Insurance Scheme provider breached and treating its database as compromised | ZDNet

by Steven Kirby | May 31, 2022 | Australian InfoSec Incidents 2022, Confidentiality, Hacked, Medical and Health Care, New South Wales, Privacy Breach, ZDNet | 0 |

Australian Medical Data Hacked May 2022: Australian National Disability Insurance Scheme case management system provider CTARS breached. “Large volume” of sensitive health data exposed.

Incident: 50k customers caught up in Tasmanian Spirit Super phishing attack | iTnews

by Steven Kirby | May 30, 2022 | Australian InfoSec Incidents 2022, Banking and Finance, Confidentiality, Email Phishing, iTnews, Privacy Breach, Tasmania | 0 |

Australian Superfund Phishing Attack May 2022: 50k customers caught up in Tasmanian Spirit Super phishing attack. Data possibly compromised after attacker overcame MFA on email account.

Incident: Australian company Amart Furniture has 100k warranty customers details breached

by Steven Kirby | May 20, 2022 | Australia, Australian InfoSec Incidents 2022, Confidentiality, In the Press, Privacy Breach, Retail | 0 |

Australian Retailer Data Breach May 2022: Australian company Amart Furniture has 100k warranty customers details breached. Database hosted on AWS was the source of the information.

NZ Incident: New Zealand’s AA Traveler “@WeLoveNZ” data breach

by Steven Kirby | May 13, 2022 | Australian InfoSec Incidents 2021, Confidentiality, Data Breach, 🥝 NZ Incidents, In the Press, New Zealand, Travel and Accommodation | 0 |

New Zealand Data Breach May 2022: Vulnerability in @WeLoveNZ database causes data breach at New Zealand’s AA Traveller; names, email address, passwords and phone numbers compromised

Incident: Ransomware attack at Australian childcare provider Building Futures Montessori causes privacy breach and data loss

by Steven Kirby | May 13, 2022 | Australia, Australian InfoSec Incidents 2021, Availability, Confidentiality, Data Breach, In the Press, Integrity, Privacy Breach, Services | 0 |

Australian Childcare Privacy Breach May 2022: Ransomware attack at Australian childcare provider Building Futures Montessori. Parents’ Names, email address, phone numbers, children’s names and date of birth compromised.

Incident: TfNSW hit by second cyber attack in less than 18 months | iTnews

by Steven Kirby | May 4, 2022 | Australian InfoSec Incidents 2022, Confidentiality, iTnews, New South Wales, Privacy Breach, State Government, Transport and Logistics | 0 |

Australian Privacy Breach May 2022: Transport for NSW hit by second cyber attack in less than 18 months. An online application used by vehicle examiners to conduct roadworthiness inspections in NSW has been struck by a cyber attack.

Incident: Sky News employees caught in cyber breach | SHM

by Steven Kirby | Feb 27, 2022 | 12.02 Protection from Malware, 12.04 Logging and monitoring, Australian InfoSec Incidents 2022, Availability, Confidentiality, Data Breach, Integrity, News Film and Media, Privacy Breach, SaaS - Software as a Service, SMH - The Sydney Morning Herald | 0 |

Australian Media Ransomware Attack February 2022. Sky News employees caught in cyber breach, Info accessed included full names, dwelling and e mail addresses, phone numbers, dates of beginning, tax file numbers, salaries, payroll IDs and superannuation fund particulars.

NZ Ransomware Incident – NZ technology company iTCo hacked, data stolen | 1 News

by Steven Kirby | Feb 26, 2022 | 12.02 Protection from Malware, Availability, Confidentiality, 🥝 NZ Incidents, In the Press, Integrity, IT Industry, New Zealand, Privacy Breach, Ransomware | 0 |

New Zealand Ransomware Attack February 2022. NZ technology company iTCo Solutions hacked, data stolen. Those responsible are claiming to have stolen more than 4 gigabytes of data.

Incident: NSW Government QR Code data leak exposes over 500,000 sensitive locations | Daily Mail Australia

by Steven Kirby | Feb 15, 2022 | 08.02.03 Handling of assets, Australian InfoSec Incidents 2022, Confidentiality, Daily Mail Australia, Data Breach, Privacy Breach, State Government, Unintended Disclosure Incident | 0 |

Australian Government Privacy Breach February 2022: NSW Government QR Code data leak exposes over 500,000 sensitive locations. Address’s included Defence sites, bombing ranges and domestic violence shelters.

Home » InfoSec Framework and Standards » CIA Impact » Confidentiality

More Australian News

ACSC and CISA detail top malware of 2021
by Juha Saarinen on August 6, 2022
The Australian Cyber Security Centre and the United States Cybersecurity and Infrastructure Security Agency have issued a joint advisory on the top …
Governing cybersecurity from the boardroom: Challenges, drivers, and ways ahead
on August 5, 2022
Overall, the responsibility to oversee cyber-risk management in modern organisations lies with Boards of Directors. However, evidence suggests that …
Incident: Student details, photos exposed in University of WA data breach | iTnews
by Steven Kirby on August 4, 2022
Australian University Privacy Incident, 1 August 2022 Student details, photos exposed in University of Western Australia data breach The privacy breach …
NSWEC slapped with human rights complaint for binning iVote
by Justin Hendry on August 2, 2022
Advocates for blind and vision impaired Australians have lodged a human rights complaint against the NSW Electoral Commission for ditching iVote …
Audit: Vic privacy watchdog uncovers third-party infosec risks at four agencies | iTnews
by Steven Kirby on July 30, 2022
Australian Audit Report 22 July 2022 Victorian privacy watchdog uncovers third-party infosec risks at four agencies Agencies only partially effective …
OIC Speaker Series No. 1 - Privacy and building trust through transparency
by Office of the Information Commissioner Queensland on July 30, 2022
Office of the Information Commissioner Speaker Series No. 1 hosted by Ms Madonna King and featuring Mr Ian Stewart AO APM, former Queensland Police Commissio...
Australian man charged over alleged international spyware operation
by Penny Travers on July 30, 2022
An Australian man who sparked a worldwide investigation into spyware he allegedly created and sold to domestic violence perpetrators and other …
Melbourne hacker charged after creating dangerous spyware | 7NEWS
by 7NEWS Australia on July 30, 2022
A Frankston man is accused of creating spy software at the age of fifteen and selling it to online predators. Victims had no idea they were being watched and...
New Cyber Incident Reporting Rules May Catch Some Industries Unaware
by Lawcadia on July 29, 2022
...Expanded rules to the Security of Critical Infrastructure Act (the SOCI Act) may catch many businesses unaware. The Act came into effect on 8 April …
Cybersecurity in the Pacific: how island nations are building their online defences
by Carsten Rudolph and James Boorman and Monica Whitty on July 29, 2022
Leaders of several Pacific nations met in Fiji last week to strengthen ties and promote unity in the region. The Pacific faces numerous challenges, …

Weekly Australian News and Monthly Incident Review Emails

No advertisements, marketing, sales, or unsolicited emails. Your email address is ONLY used to send the publications listed above.

Featured

Incident: Student details, photos exposed in University of WA data breach | iTnews

Featured

Incident: WA Arts and Culture Trust discloses potential data breach | CRN Australia

Featured

Audit: WA Auditor General tables the 2021 Financial Audit Results for Universities and TAFEs

Featured

Audit: Vic privacy watchdog uncovers third-party infosec risks at four agencies | iTnews

Featured

Quote: Chinese proverb "When planning for a year, plant corn. When planning for a ..."

Featured

Quote: Anthony T. Hincks "Security just doesn't start ..."

Category: Confidentiality

More Australian News

Weekly Australian News and Monthly Incident Review Emails