Government agency Service NSW has revealed that the personal details of 186,000 customers were stolen after a cyberattack targeted 47 email accounts. The data took place earlier this year.
After a four-month investigation that began in April, Service NSW discovered that a huge amount of data (738GB), including 3.8 million documents, was compromised after an attack on email.
The agency, however, said it has found no evidence to suggest that individual MyServiceNSW or databases Service NSW during the cyberattack.
“The data consisted of documents, such as handwritten notes and forms, scanned documents, and transaction records.“.
"We regret that customer information was obtained in this manner," the agency said.
Service NSW said it has begun notifying customers affected by the data breach by sending personalised letters. The letters contain information about the data that was stolen and how customers can access “ customer support”, as well as a dedicated case manager for assistance and possible replacement of some documents. The company expects to complete the process of notifying customers in December.
"Our focus is now on providing the best possible support to the approximately 186,000 customers and staff we have identified as being affected by the data breach," Service NSW CEO Damon Rees.
Service NSW also revealed that police are investigating the data theft, which has been described as a "criminal attack".
Also, a review by the NSW Auditor-General into Service NSW's defence, practices, systems and training is underway
The agency said that after the data theft, it put additional security measures in place to protect against future attacks, such as partnering with IDCare to provide the organization with additional “cyber support.”
“We have accelerated cybersecurity plans and modernization of legacy business processes to keep customer information as secure as possible,” he said.
Last week, another data breach was revealed, as the data of thousands of New South Wales (NSW) driver's license holders was stolen.
In June, the New South Wales government sought to strengthen cybersecurity by investing in protecting existing systems, developing new technologies and increasing the cyber workforce.
In addition, the government has launched a strategy to promote cybersecurity. “The 2020 NSW Cyber Security Strategy will ensure the NSW Government continues to deliver secure, reliable and resilient services in an ever-changing and evolving environment,” said Minister for Customer Service Victor Dominello.
