Data#3, an Australian IT company, informed the ASX (Sydney Stock Exchange) on Thursday that it had been the victim of a small-scale cyberattack. “We are experiencing a security incident which is under investigation,” the company said.
Data#3 has proactively contacted the 28 customers who appear to have been affected. Pending the outcome of the investigation, Data#3 may need to take further action to address the incident.
In addition to contacting the 28 customers affected by the incident, the company said it is working with a security researcher to document the incident.
Data#3 also said the incident did not need to be reported to the Australian Office of Information and Privacy (OAIC), as required by Australia’s Notifiable Data Breach (NDB) system for breaches that could lead to “serious harm.” However, the incident was clearly deemed significant enough to notify the ASX.
As we reported in a previous article, Australia has been the victim of several cyberattacks in the past year. A fortnight ago, Australian job search website Seek said it had suffered an “internal technical issue” that resulted in users seeing other users’ details when they logged in.
“We have identified an internal technical issue that occurred during a 23-minute period on Monday, August 10, 2020,” the company said.
“During this time period, due to a cache error, incorrect information such as some users’ previous jobs and education was able to be displayed on profiles of users who were logged in at the time.”
Seek said that no names, contact information or resumes of candidates on the profiles were affected. It added that the bug affected fewer than 2,000 search, as well as 206 job submitted during the time period.
The job site said it did not consider the specific data leak significant.
The incident at Data#3 is still under investigation, so we will update you if we have further information.
