Review into cyber-attack on public servants’ data finds more victims

More victims have been found of a massive cyber attack on SA public servants. Personal details including salary and bank account information have been accessed by hackers. Was your data stolen?

Investigations into a major cyber-attack that targeted state government employees have revealed many more victims whose private information was accessed by the hackers.

A review of information provided by external payroll software provider Frontier Software has revealed an additional 592 employees of agencies including the Adelaide Venue Management Corporation have also had vital personal information stolen.

The data included tax file numbers, bank account information, email and phone numbers, superannuation details and salary information.

The review also revealed an additional 380 former and current employees of the SACE Board, Homestart Finance and the Teachers Registration Board are also affected with information including tax file numbers and personal contact details compromised.

And significantly, the review has also revealed around 690 current and former employees of two other agencies – Forestry SA and the Lotteries Commission of SA – have also had significant personal information exposed by the hackers.

Cyber criminals.

Treasury officials are seeking further details from the two agencies to assess the level of information stolen and impact on those targeted.

Frontier Software, an external software provider that services the majority of government employees was the target of a ransomware cyber-attack in November last year. The attack has compromised the data of more than 90,000 government employees.

Initially it was feared 80,000 public servants data had been compromised, but a review by Price Waterhouse Coopers later revealed another 13,000 individuals had been exposed

The cyber-attack was perpetrated by an overseas criminal group which posted some of the files on the dark web shortly after the breach – but they were only accessible for 24 hours after the company took action.

A spokesperson for Treasurer Stephen Mullighan said letters were being sent to those directly affected by the data breaches recently discovered.

“So far more than 3000 individual employees have accessed a cyber security support service put in place to assist victims of the data breach,’’ the spokesperson said.

“Shared Services SA will continue to collate and monitor cases reported by public servants and staff about potential impacts resulting from the Frontier cyber incident.

“To date, there have been two instances reported of suspected credit fraud. Following investigation, no evidence has been found which would suggest any linkage to the Frontier cyber incident.’’

Last month it was revealed a cyber ransom attack on national prison operator G4S, which operates the Mt Gambier Prison, may have compromised the data of its employees.

The attack, which did not compromise the security of the prison, has not escalated since security measures to protect data were implemented on July 13.