Services Archives - Australian Information Security Awareness and Advisory

Incident: Ransomware group KillSec claims hack on Clubfit Software | Cyberdaily.au

by Steven Kirby | Dec 4, 2024 | Australian InfoSec Incidents 2024, cyberdaily.au, Queensland, Ransomware, Services | 0 |

Australian Ransomware Attack, 4 December 2024: Queensland – Ransomware group KillSec claims hack on gym management software provider Brisbane-based Clubfit Software. Stolen data, approximately 200 gigabytes, includes sensitive information such as gym membership agreements with customer details.

Incident: RansomHub hits third-party ASIC compliance firm in alleged cyber attack | Cyberdaily.au

by Steven Kirby | Nov 20, 2024 | Australia, Australian InfoSec Incidents 2024, Confidentiality, cyberdaily.au, Ransomware, Services | 0 |

Australian Ransomware Attack, 20 November 2024: Notorious ransomware gang RansomHub has claimed an attack on a third-party firm that assists businesses with ASIC compliance. RansomHub claims to have exfiltrated 30 gigabytes of data.

Incident: RansomHub claims 700GB stolen from Australian retail design company | cyberdaily.au

by Steven Kirby | Apr 30, 2024 | Australian InfoSec Incidents 2024, cyberdaily.au, New South Wales, Ransomware, Services | 0 |

Australian Ransomware Attack, 30 April 2024: RansomHub, the ransomware threat actor behind the recent UnitedHealth/Change Healthcare breach, said it has breached the systems of Sydney-based Design Intoto. Major clients include Coca-Cola, Tefal, KFC, Vodafone and more

Incident: Ventia takes systems offline to contain cyber attack | iTnews

by Steven Kirby | Jul 11, 2023 | Australia, Australian InfoSec Incidents 2023, Critical Infrastructure, iTnews, Services | 0 |

Australian Critical Infrastructure Attack, 11 July 2023: Australian critical infrastructure company Ventia has been breached in an online attack. Ventia specialises in long-term operation, maintenance, and management of critical public and private assets and infrastructure.

Incident: Ransomware attack at Australian childcare provider Building Futures Montessori causes privacy breach and data loss

by Steven Kirby | May 13, 2022 | Australia, Australian InfoSec Incidents 2021, Availability, Confidentiality, Data Breach, In the Press, Integrity, Privacy Breach, Services | 0 |

Australian Childcare Privacy Breach May 2022: Ransomware attack at Australian childcare provider Building Futures Montessori. Parents’ Names, email address, phone numbers, children’s names and date of birth compromised.

Incident: Coles, Westpac, AMP and Department of Defence caught up in ‘significant’ data breach of Finite Recruitment | ABC News (Australia)

by Steven Kirby | Dec 18, 2021 | 12.06 Technical vulnerability management, ABC News (Australia), Australia, Australian InfoSec Incidents 2021, Confidentiality, Human Resources, Privacy Breach, SaaS - Software as a Service, Services | 0 |

Australian Recruitment Ransomware Incident December 2021: Coles, Westpac, AMP and Department of Defence caught up in ‘significant’ data breach of Finite Recruitment. Conti claims to have stolen more than 300 gigabytes of data in this attack.

Incident: NSW government casual recruiter suffers ransomware hit | ZDNet

by Steven Kirby | Dec 17, 2021 | 12.06 Technical vulnerability management, Australian InfoSec Incidents 2021, Availability, Confidentiality, New South Wales, Privacy Breach, SaaS - Software as a Service, Services, State Government, ZDNet | 0 |

Australian Ransomware Incident December 2021: NSW government casual recruiter Finite Recruitment suffers Conti ransomware hit. Attackers claimed to have stolen more than 300GB of financial and personal data.

Incident: Cyber criminals force shutdown of NSW budgeting system | Australian Financial Review (AFR)

by Steven Kirby | Dec 16, 2021 | 12.06 Technical vulnerability management, Australian Financial Review (AFR), Australian InfoSec Incidents 2021, Availability, New South Wales, SaaS - Software as a Service, Services, State Government | 0 |

Australian Cyber Security Incident December 2021: Cyber criminals force shutdown of New South Wales’ Prime/Oracle based budgeting system. The problem is part of a worldwide vulnerability identified in Log4j.

Incident: Personal details of up to 80,000 SA government employees accessed in cyber attack | ABC News (Australia)

by Steven Kirby | Dec 10, 2021 | ABC News (Australia), Australian InfoSec Incidents 2021, Confidentiality, Integrity, ISO27k 8.7 Protection against malware, Privacy Breach, SaaS - Software as a Service, Services, South Australia, State Government, Utilities | 0 |

Australian State Government Ransomware Attack December 2021: Up to 80000 South Australian Government employee data stolen in Frontier Software ransomware attack. Data accessed include names, dates of birth, tax file numbers, addresses, bank account details and pay details (remuneration, tax withheld, superannuation contributions).

Incident: Chris 21 payroll software provider hit by suspected ransomware attack | iTnews

by Steven Kirby | Nov 17, 2021 | Australian InfoSec Incidents 2021, Availability, Human Resources, Integrity, ISO27k 8.7 Protection against malware, iTnews, SaaS - Software as a Service, Services | 0 |

Australian Ransomware Attack November 2021. Frontier Software provider of Chris 21 payroll software hit by suspected ransomware attack. The cyber attack left 330 employers without automated payroll.

Incident: Australian Ransomware Breach December 2020 | ABC News (Australia)

by Steven Kirby | Dec 24, 2020 | ABC News (Australia), Australia, Australian InfoSec Incidents 2020, Availability, Confidentiality, Integrity, Malware, Medical and Health Care, Mining and Resources, Services, State Government | 0 |

Australian Malware Breach December 2020 – NSW Health, Rio Tinto, Serco named as victims of massive global SolarWinds hack attack. NSW Health appears to have been infected with potentially dangerous Russian malware since June.

Incident: Auto services firm Inchcape Australian hit by Windows Ransomexx ransomware | iTWire

by Steven Kirby | Dec 14, 2020 | Australia, Australian InfoSec Incidents 2020, Automotive, Availability, Confidentiality, iTWire, Privacy, Privacy Breach, Ransomware, Services | 0 |

Australian Ransomware Breach December 2020 – Automotive services provider Inchcape Australia appears to have been compromised by the Windows Ransomexx ransomware. Cyber criminals who hit the company leaking some data that they stole, on the dark web.

Incident: Law In Order hit by ransomware attack | iTnews

by Steven Kirby | Nov 24, 2020 | Australia, Australian InfoSec Incidents 2020, Availability, Data Breach, Integrity, iTnews, Law & Legal, Ransomware, Services | 0 |

Australian Netwalker Ransomware Attack November 2020. Australian end-to-end document and digital solutions provider to the legal industry Law In Order says it has suffered a “cyber security incident” and has had to limit access to most of its website as a precaution.

Incident: Australian firm Tandem Corp hit by Windows NetWalker ransomware | iTWire

by Steven Kirby | Sep 2, 2020 | Australian InfoSec Incidents 2020, Confidentiality, Human Resources, iTWire, Privacy, Privacy Breach, Ransomware, Services, Victoria | 0 |

Australian Ransomware Attack September 2020: Australian workforce design and delivery firm Tandem Corp hit by Windows NetWalker ransomware. Allegedly stolen information includes financial data, personnel information, and also passport details.

Incident: Australian customer experience firm Stellar hit by ransomware | iTWire

by Steven Kirby | May 26, 2020 | Australia, Australian InfoSec Incidents 2020, iTWire, Ransomware, Services | 0 |

Australian Ransomware Attack May 2020: Australian customer experience firm Stellar, that also operates across Asia, North America and Africa, appears to have taken a hit from a group of attackers using the NetWalker ransomware that works on Windows systems.