{"id":44360,"date":"2021-12-10T05:58:17","date_gmt":"2021-12-10T05:58:17","guid":{"rendered":"https:\/\/www.threatshub.org\/blog\/ransomwared-payroll-provider-leaks-data-on-38000-australian-government-workers\/"},"modified":"2021-12-10T05:58:17","modified_gmt":"2021-12-10T05:58:17","slug":"ransomwared-payroll-provider-leaks-data-on-38000-australian-government-workers","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/ransomwared-payroll-provider-leaks-data-on-38000-australian-government-workers\/","title":{"rendered":"Ransomwared payroll provider leaks data on 38,000 Australian government workers"},"content":{"rendered":"

Personal information describing names, addresses, bank account details, and taxation IDs of 38,000 Australian government employees has been leaked to the dark web after a ransomware attack.<\/p>\n

The treasurer of the Australian State of South Australia, Rob Lucas, today revealed<\/a> the source of the leak: outsourced payroll provider Frontier Software.<\/p>\n

Frontier had previously advised that the attack had been deflected and customer data was safe. On November 16, the company admitted<\/a> it was “experiencing a cyber incident which has resulted in limited access to some of our computer systems and data”. The next day, Frontier advised<\/a> customers that service had been restored and that its investigations “show no evidence of any customer data being exfiltrated or stolen”. Customers were told that some data was encrypted, but it was nothing to worry about as “Australian customer HR & Payroll data and systems are segmented from the corporate systems and were not compromised”.<\/p>\n