EnergyAustralia has been added to the list of victims of cyberattacks, with hundreds of its customers' details exposed.
See also: New version of Ursnif malware – known as Gozi – released
On Friday night, the electric company issued a statement saying that 323 of its customers' accounts had been compromised. These customers either own homes or small businesses.
The compromised data includes information such as names, addresses, emails, electricity and gas, phone numbers and the first six and last three digits of their credit cards.
See also: Meta Pixel: Health system data breach affects 3 million patients
The company said that customer data was “most likely” not transferred outside the company’s platform.
They said that sensitive documents such as driver's licenses or passports.
EnergyAustralia said there was “no evidence” that customer information was extracted from the company’s systems. It’s also important to note that: identification documents (such as driver’s licenses or passports) and banking information are not stored in My Account.
“Your information is secure and no other EnergyAustralia systems were affected.”
Customers must always use 12-character passwords with a mix of uppercase and lowercase letters, numbers, and special characters.
In the past, only eight characters were required for account passwords.
The breach occurred on September 30, and affected users contacted the company on October 2. The company also notified regulators and government agencies about the incident.
In a statement, EnergyAustralia's customer manager, Mark Brownfield, apologised for the security breach and urged customers to change their passwords.
See also: OldGremlin: Uses Linux ransomware to target Russian organizations
He apologized, saying: "We understand the concern this situation may have caused our customers.".
The breach comes after Optus and Medibank were recently targeted in major cyberattacks. Cybercriminals stole around 200 gigabytes of customer data from Medibank, which likely includes private information such as addresses, credit card numbers, medical diagnoses and Medicare.
Source of information: theguardian.com
