Home » Sector » Third-Party Risk »
Australian Finance Services Privacy Breach, 27 November 2024: Mortgage broker Finsure confirms ‘cyber incident’ impacting customers and brokers. Finsure has confirmed that the marketing data of a number of its brokers and customers was impacted as a result of breach of their third-party provider Activepipe.
Read More
Australian Entertainment Privacy Breach, 31 May 2024: Ticketek Australia says customers’ names, emails and dates of birth may have been accessed in cyber security breach. The announcement comes just days after rival company Ticketmaster was reportedly attacked by a hacker group which stole customer information.
Read More
Australian Medical Data Breach, 16 May 2024: E-script provider MediSecure is the health organisation at the centre of the large-scale ransomware data breach. Early indicators suggest the incident originated from one of our third-party vendors.
Read More
Australian Clubs Privacy Breach, 02 May 2024: Cybercrime detectives arrest man following alleged data breach involving more than 1 million NSW clubs customer records. ID Support NSW confirmed more than 17 licensed clubs across NSW and the ACT have been implicated in the data breach.
Read More
Australian Councils Ransomware Attack, 22 April 2024: Victorian councils’ OracleCMS after-hours call answering service breached. Provider, OracleCMS hacked by Lockbit with around 50 clients’ data compromised.
Read More
Australian Pathology Ransomware Attack, 14 November 2023: Australian pathology company Tissupath, reported a ransomware attack at a third-party IT supplier, Core Desktop. About 130,000 victims of a data hack at pathology company TissuPath in August involving referrals issued between 2011 and 2020 was to blame.
Read More
Australian Patient Data, 28 October 2023: SA Health patients caught up in data breach of third-party platform Personify Care. Health information of 121 patients and the names and phone numbers of about 12,000 others was deleted by an “unauthorised third party.
Read More
Australian Health Insurer Hacked, 28 October 2023: The Super SA data hack impacted thousands but took two months to come to light. Here’s what we know. 14,011 members may have been impacted by a cyber security incident involving a former third-party service provider.
Read More
Australian IT Services Ransomware Attack, 05 September 2023: Russian ransomware gang AlphV breaches Core Desktop, a South Melbourne IT services company. TissuPath, Strata Plan and Barry Plant Blackburn were all clients of Core Desktop.
Read More
Australian Defence Agencies Third-Party Breach, 07 September 2023. Defence Housing Australia and Department of Veterans’ Affairs investigates third-party provider hack exposure. The breached service provider was not identified.
Read More
Australian Ransomware Attack, 05 September 2023: Russian ransomware gang AlphV targets pathology company, law firms in latest string of attacks. Breached: Code Desktop, TissuPath, Strata Plan, Barry Plant Blackburn, Tisher Liner FC Law
Read More
Australian University Third-Party Data Breach, 1 September 2023: The University of Sydney has disclosed a data breach potentially affecting international students. The data breach involved a third-party provider, still undisclosed.
Read More
Australian Telemarketer Breach, 23 August 2023: Pareto Phone, a Brisbane-based telemarketing company that contacts potential donors on behalf of charities, was hacked by cybercriminals in April. 70 charities, including Amnesty International Australia, Australian Conservation Foundation, Wilderness Society, Cancer Council Cancer, The Fred Hollows Foundation, Canteen, Heart Foundation, and Medecins Sans Frontieres.
Read More
Australian Mining Cyber Incident, 18 July 2023: Iron ore giant Fortescue Metals targeted by Russian ransomware group. Australian mining company confirms hack occurred on 28 May but data disclosed ‘was not confidential in nature’.
Read More
Australian Event Management Incident, 06 July 2023: Australian critical infrastructure company Ventia has been breached in an online attack. Information including names, email addresses, home addresses, phone numbers and bank details.
Read More
Australian Wealth Management Incident 28 June 2023: Wealth and asset management firm Perpetual Limited says some personal info compromised in attack on supplier. First names, surnames and addresses and bank account details maybe compromised.
Read More
Australian Gambling Ransomware Attack, 24 June 2023: Wests Newcastle shuts down cashless gambling trail after digital payment processing firm Banktech experienced a ransomware attack.
Read More
Australian SaaS Provider Breach 10 May 2023: TechnologyOne investigates ‘cyber incident’ on M365 system. “Unauthorised third party” has accessed the company’s internal Microsoft 365 platform.
Read More
Australian Retail Third-Party Breach, 15 March 2023: Coles confirms its customers impacted by Latitude Financial data breach. Coles says it has not been informed of how many of its customers have been impacted, the data dates back as far as 2005.
Read More
Updated Australian State Government Data Breach, 31 March 2023: Tasmanians affected by security breach of third-party file transfer service GoAnywhere. Tasmanian government has come under fire for providing a lack of detail.
Read More
Home » Sector » Third-Party Risk »
There's a warning tonight about a rise in fake digital IDs being sold to teenagers. Cyber safety experts say it's putting vulnerable Victorians at risk of having their identities stolen. [...]
The federal government has launched a pilot scheme that will allow Australians to compare the cyber security of smart devices before buying them. • … [...]
Key points ACMA has fined Telstra $277,000 for failing to use required identity authentication processes to prevent SIM swapping fraud. • The fraud … [...]
Modernised Definitions: Casting a Wider Net The Exposure Draft Bill would amend and clarify some of the foundational definitions in the Privacy Act … [...]
Shifting the emphasis from individuals upholding privacy standards to harmful and invasive business practices is the right move. But an existing … [...]
Threat detection and reporting Internal policies and procedures What policies or procedures must organisations have in place to protect data or … [...]
When Telstra engineers embarked on a simple server chassis replacement exercise in 2020, they could barely have contemplated the complex chain of … [...]
Ransomware actor claims hack of government department, but evidence suggests no malicious activity has occurred… But patient data from multiple … [...]
Key points The Northern Territory government plans to offer digital driver's licences built to internationally recognised standards by the end of the … [...]
Key points Draft legislation would give Australian organisations 72 hours to notify the Information Commissioner of an eligible data breach, replacing … [...]
You're not going to believe this, but turns out you can't always take criminals at their word. Actually, I'll walk that back a bit as it may not even … [...]